high7.5
CVE-2022-34179
Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin
Impact
Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system. Embeddable Build Status Plugin 2.0.4 restricts the `style` query parameter to one of the three legal values.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:embeddable-build-status | < 2.0.4 | 2.0.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Embeddable Build Status | through 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2792
- https://github.com/advisories/GHSA-93mx-2vf9-28c4
- https://nvd.nist.gov/vuln/detail/CVE-2022-34179
- https://github.com/jenkinsci/embeddable-build-status-plugin/commit/63f82f28d989d30a23089a0a66c11f222651a8c6