high8.0
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Impact
Jenkins Pipeline: Stage View Plugin provides a visualization of Pipeline builds. It also allows users to interact with `input` steps from Pipeline: Input Step Plugin. Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of `input` steps when using it to generate URLs to proceed or abort Pipeline builds. This allows attackers able to configure Pipelines to specify `input` step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins. Pipeline: Stage View Plugin 2.27 correctly encodes the ID of `input` steps when using it to generate URLs to proceed or abort Pipeline builds.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view | < 2.24.2 | 2.24.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Pipeline\ | before 2.27 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.openwall.com/lists/oss-security/2022/10/19/3
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828
- https://github.com/advisories/GHSA-g975-f26h-93g8
- https://nvd.nist.gov/vuln/detail/CVE-2022-43408
- https://github.com/jenkinsci/pipeline-stage-view-plugin/commit/cee275109ee748fa9f599ec60159807a28a2933f