Vulnerability-Lookup

WID-SEC-W-2023-2286

Vulnerability from csaf_certbund - Published: 2023-09-06 22:00 - Updated: 2023-09-06 22:00

Summary

Jenkins Plugins: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Angriff: Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.

Betroffene Betriebssysteme: - UNIX - Linux - Windows

CVE-2023-41947

In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anfälligkeiten für Cross-Site-Scripting-Angriffe, für Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zurückzuführen. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion nötig

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41946

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41945

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41944

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41943

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41942

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41941

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41940

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41939

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41938

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41937

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41936

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41935

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41934

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41933

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41932

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41931

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2023-41930

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

CVE-2022-46751

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Jenkins Jenkins plugins Jenkins	`cpe:/a:cloudbees:jenkins:plugins`	—

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.jenkins.io/security/advisory/2023-09-06/	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterst\u00fctzung bei Softwareentwicklungen aller Art.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-2286 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2286.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-2286 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2286"
      },
      {
        "category": "external",
        "summary": "Jenkins Security Advisory vom 2023-09-06",
        "url": "https://www.jenkins.io/security/advisory/2023-09-06/"
      }
    ],
    "source_lang": "en-US",
    "title": "Jenkins Plugins: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-09-06T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:58:09.256+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2023-2286",
      "initial_release_date": "2023-09-06T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-09-06T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Jenkins Jenkins plugins",
            "product": {
              "name": "Jenkins Jenkins plugins",
              "product_id": "T013614",
              "product_identification_helper": {
                "cpe": "cpe:/a:cloudbees:jenkins:plugins"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Jenkins"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-41947",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41947"
    },
    {
      "cve": "CVE-2023-41946",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41946"
    },
    {
      "cve": "CVE-2023-41945",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41945"
    },
    {
      "cve": "CVE-2023-41944",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41944"
    },
    {
      "cve": "CVE-2023-41943",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41943"
    },
    {
      "cve": "CVE-2023-41942",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41942"
    },
    {
      "cve": "CVE-2023-41941",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41941"
    },
    {
      "cve": "CVE-2023-41940",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41940"
    },
    {
      "cve": "CVE-2023-41939",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41939"
    },
    {
      "cve": "CVE-2023-41938",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41938"
    },
    {
      "cve": "CVE-2023-41937",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41937"
    },
    {
      "cve": "CVE-2023-41936",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41936"
    },
    {
      "cve": "CVE-2023-41935",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41935"
    },
    {
      "cve": "CVE-2023-41934",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41934"
    },
    {
      "cve": "CVE-2023-41933",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41933"
    },
    {
      "cve": "CVE-2023-41932",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41932"
    },
    {
      "cve": "CVE-2023-41931",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41931"
    },
    {
      "cve": "CVE-2023-41930",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2023-41930"
    },
    {
      "cve": "CVE-2022-46751",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Jenkins Plugins existieren mehreren Schwachstellen. Diese sind unter anderem auf Anf\u00e4lligkeiten f\u00fcr Cross-Site-Scripting-Angriffe, f\u00fcr Cross-Site-Request-Forgery-Angriffe sowie Server-Side-Request-Forgery-Angriffe zur\u00fcckzuf\u00fchren. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder Dateien zu manipulieren. Zur erfolgreichen Ausnutzung einiger dieser Schwachstellen ist eine Anmeldung oder Nutzeraktion n\u00f6tig"
        }
      ],
      "product_status": {
        "known_affected": [
          "T013614"
        ]
      },
      "release_date": "2023-09-06T22:00:00.000+00:00",
      "title": "CVE-2022-46751"
    }
  ]
}

CVE-2022-46751 (GCVE-0-2022-46751)

Vulnerability from cvelistv5 – Published: 2023-08-21 06:55 – Updated: 2025-02-13 16:33

Title

Apache Ivy: XML External Entity vulnerability in Apache Ivy

Summary

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used. This can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways. Starting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed. Users of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about "JAXP Properties for External Access restrictions" inside Oracle's "Java API for XML Processing (JAXP) Security Guide".

Severity

No CVSS data available.

CWE

CWE-611 - Improper Restriction of XML External Entity Reference
CWE-91 - XML Injection (aka Blind XPath Injection)

Assigner

apache

References

5 references

URL	Tags
https://docs.oracle.com/en/java/javase/13/securit…	mitigation
https://gitbox.apache.org/repos/asf?p=ant-ivy.git…	patch
https://lists.apache.org/thread/9gcz4xrsn8c7o9gb3…	release-notes
https://lists.apache.org/thread/1dj60hg5nr36kjr4p…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Ivy	Affected: 1.0.0 , ≤ 2.5.1 (semver)

Credits

CC Bomber, Kitri BoB Jenkins Security Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:39:38.282Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "mitigation",
              "x_transferred"
            ],
            "url": "https://docs.oracle.com/en/java/javase/13/security/java-api-xml-processing-jaxp-security-guide.html#GUID-94ABC0EE-9DC8-44F0-84AD-47ADD5340477"
          },
          {
            "tags": [
              "patch",
              "x_transferred"
            ],
            "url": "https://gitbox.apache.org/repos/asf?p=ant-ivy.git;a=commit;h=2be17bc18b0e1d4123007d579e43ba1a4b6fab3d"
          },
          {
            "tags": [
              "release-notes",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/9gcz4xrsn8c7o9gb377xfzvkb8jltffr"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/1dj60hg5nr36kjr4p1100dwjrqookps8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:apache:ivy:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ivy",
            "vendor": "apache",
            "versions": [
              {
                "lessThanOrEqual": "2.5.1",
                "status": "affected",
                "version": "1.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 8.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-46751",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-27T20:07:17.726856Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-27T20:27:38.791Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Ivy",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.5.1",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "CC Bomber, Kitri BoB"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Jenkins Security Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.\u003cp\u003eThis issue affects any version of Apache Ivy prior to 2.5.2.\u003c/p\u003e\u003cp\u003eWhen Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used.\u003c/p\u003e\u003cp\u003eThis can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways.\u003c/p\u003e\u003cp\u003eStarting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about \"JAXP Properties for External Access restrictions\" inside Oracle\u0027s \"Java API for XML Processing (JAXP) Security Guide\".\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.\n\nWhen Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used.\n\nThis can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways.\n\nStarting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed.\n\nUsers of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about \"JAXP Properties for External Access restrictions\" inside Oracle\u0027s \"Java API for XML Processing (JAXP) Security Guide\"."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-611",
              "description": "CWE-611 Improper Restriction of XML External Entity Reference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-91",
              "description": "CWE-91 XML Injection (aka Blind XPath Injection)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-06T14:06:11.958Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "mitigation"
          ],
          "url": "https://docs.oracle.com/en/java/javase/13/security/java-api-xml-processing-jaxp-security-guide.html#GUID-94ABC0EE-9DC8-44F0-84AD-47ADD5340477"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitbox.apache.org/repos/asf?p=ant-ivy.git;a=commit;h=2be17bc18b0e1d4123007d579e43ba1a4b6fab3d"
        },
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://lists.apache.org/thread/9gcz4xrsn8c7o9gb377xfzvkb8jltffr"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/1dj60hg5nr36kjr4p1100dwjrqookps8"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2022-11-30T17:54:00.000Z",
          "value": "reported to the ASF security team"
        },
        {
          "lang": "en",
          "time": "2023-08-20T21:00:00.000Z",
          "value": "made public"
        }
      ],
      "title": "Apache Ivy: XML External Entity vulnerability in Apache Ivy",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2022-46751",
    "datePublished": "2023-08-21T06:55:00.181Z",
    "dateReserved": "2022-12-07T12:23:31.486Z",
    "dateUpdated": "2025-02-13T16:33:53.044Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41930 (GCVE-0-2023-41930)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:59

Summary

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a history entry, allowing attackers to have Jenkins render a manipulated configuration history that was not created by the plugin.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Job Configuration History Plugin	Affected: 0 , ≤ 1227.v7a_79fc4dc01f (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41930",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:58:57.520618Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:59:09.503Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Job Configuration History Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1227.v7a_79fc4dc01f",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the \u0027name\u0027 query parameter when rendering a history entry, allowing attackers to have Jenkins render a manipulated configuration history that was not created by the plugin."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:38.989Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41930",
    "datePublished": "2023-09-06T12:08:52.399Z",
    "dateReserved": "2023-09-05T16:39:57.391Z",
    "dateUpdated": "2024-09-26T19:59:09.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41931 (GCVE-0-2023-41931)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:58

Summary

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Job Configuration History Plugin	Affected: 0 , ≤ 1227.v7a_79fc4dc01f (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.187Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41931",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:58:29.151333Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:58:39.502Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Job Configuration History Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1227.v7a_79fc4dc01f",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:40.143Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41931",
    "datePublished": "2023-09-06T12:08:53.040Z",
    "dateReserved": "2023-09-05T16:39:57.391Z",
    "dateUpdated": "2024-09-26T19:58:39.502Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41932 (GCVE-0-2023-41932)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:58

Summary

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called 'history.xml'.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Job Configuration History Plugin	Affected: 0 , ≤ 1227.v7a_79fc4dc01f (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.163Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3235"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41932",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:58:07.675349Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:58:14.787Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Job Configuration History Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1227.v7a_79fc4dc01f",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict \u0027timestamp\u0027 query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called \u0027history.xml\u0027."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:41.324Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3235"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41932",
    "datePublished": "2023-09-06T12:08:53.687Z",
    "dateReserved": "2023-09-05T16:39:57.391Z",
    "dateUpdated": "2024-09-26T19:58:14.787Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41933 (GCVE-0-2023-41933)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:57

Summary

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Job Configuration History Plugin	Affected: 0 , ≤ 1227.v7a_79fc4dc01f (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.240Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3235"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41933",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:57:36.421616Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:57:44.018Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Job Configuration History Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1227.v7a_79fc4dc01f",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:42.483Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3235"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41933",
    "datePublished": "2023-09-06T12:08:54.329Z",
    "dateReserved": "2023-09-05T16:39:57.391Z",
    "dateUpdated": "2024-09-26T19:57:44.018Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41934 (GCVE-0-2023-41934)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:57

Summary

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked.

Severity

No CVSS data available.

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Pipeline Maven Integration Plugin	Affected: 0 , ≤ 1330.v18e473854496 (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3257"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41934",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:56:32.117325Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-532",
                "description": "CWE-532 Insertion of Sensitive Information into Log File",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:57:19.685Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Pipeline Maven Integration Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1330.v18e473854496",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if \"Treat username as secret\" is checked."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:43.652Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3257"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41934",
    "datePublished": "2023-09-06T12:08:55.028Z",
    "dateReserved": "2023-09-05T16:39:57.392Z",
    "dateUpdated": "2024-09-26T19:57:19.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41935 (GCVE-0-2023-41935)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:55

Summary

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Azure AD Plugin	Unaffected: 397.v907382dd9b_98 , < * (maven) Unaffected: 378.380.v545b_1154b_3fb_ , < 378.* (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.440Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3227"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41935",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:55:05.096531Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:55:15.254Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Jenkins Azure AD Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "397.v907382dd9b_98",
              "versionType": "maven"
            },
            {
              "lessThan": "378.*",
              "status": "unaffected",
              "version": "378.380.v545b_1154b_3fb_",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:44.823Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3227"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41935",
    "datePublished": "2023-09-06T12:08:55.693Z",
    "dateReserved": "2023-09-05T16:39:57.392Z",
    "dateUpdated": "2024-09-26T19:55:15.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41936 (GCVE-0-2023-41936)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:54

Summary

Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected token are equal, potentially allowing attackers to use statistical methods to obtain a valid token.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Google Login Plugin	Affected: 0 , ≤ 1.7 (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41936",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:54:23.087469Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:54:41.046Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Google Login Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.7",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected token are equal, potentially allowing attackers to use statistical methods to obtain a valid token."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:45.992Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41936",
    "datePublished": "2023-09-06T12:08:56.365Z",
    "dateReserved": "2023-09-05T16:39:57.392Z",
    "dateUpdated": "2024-09-26T19:54:41.046Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41937 (GCVE-0-2023-41937)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:53

Summary

Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Bitbucket Push and Pull Request Plugin	Affected: 2.4.0 , ≤ 2.8.3 (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.384Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3165"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41937",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:53:43.996396Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:53:52.607Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jenkins Bitbucket Push and Pull Request Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "2.8.3",
              "status": "affected",
              "version": "2.4.0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:47.164Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3165"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41937",
    "datePublished": "2023-09-06T12:08:57.044Z",
    "dateReserved": "2023-09-05T16:39:57.392Z",
    "dateUpdated": "2024-09-26T19:53:52.607Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-41938 (GCVE-0-2023-41938)

Vulnerability from cvelistv5 – Published: 2023-09-06 12:08 – Updated: 2024-09-26 19:53

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules.

Severity

No CVSS data available.

Assigner

jenkins

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-09-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Ivy Plugin	Affected: 0 , ≤ 2.5 (maven)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T19:09:49.178Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-09-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3093"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-41938",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T19:53:14.610645Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-26T19:53:22.647Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins Ivy Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "2.5",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-24T12:51:48.345Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-09-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3093"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/06/9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-41938",
    "datePublished": "2023-09-06T12:08:57.719Z",
    "dateReserved": "2023-09-05T16:39:57.392Z",
    "dateUpdated": "2024-09-26T19:53:22.647Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2023-2286

CVE-2022-46751 (GCVE-0-2022-46751)

CVE-2023-41930 (GCVE-0-2023-41930)

CVE-2023-41931 (GCVE-0-2023-41931)

CVE-2023-41932 (GCVE-0-2023-41932)

CVE-2023-41933 (GCVE-0-2023-41933)

CVE-2023-41934 (GCVE-0-2023-41934)

CVE-2023-41935 (GCVE-0-2023-41935)

CVE-2023-41936 (GCVE-0-2023-41936)

CVE-2023-41937 (GCVE-0-2023-41937)

CVE-2023-41938 (GCVE-0-2023-41938)

Tags

Sightings

Nomenclature