GHSA-5ghv-wxh9-7356

Suggest an improvement
Source
https://github.com/advisories/GHSA-5ghv-wxh9-7356
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-5ghv-wxh9-7356/GHSA-5ghv-wxh9-7356.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-5ghv-wxh9-7356
Aliases
  • CVE-2023-35149
Published
2023-06-14T15:30:37Z
Modified
2023-11-04T05:24:02.129696Z
Severity
  • 4.2 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Jenkins Digital.ai App Management Publisher Plugin missing permission checks
Details

Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier does not perform permission checks in several HTTP endpoints.

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Additionally, these HTTP endpoints do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Database specific
{
    "nvd_published_at": "2023-06-14T13:15:12Z",
    "cwe_ids": [
        "CWE-862"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-06-14T20:33:37Z"
}
References

Affected packages

Maven / org.jenkins-ci.plugins:ease-plugin

Package

Name
org.jenkins-ci.plugins:ease-plugin
View open source insights on deps.dev
Purl
pkg:maven/org.jenkins-ci.plugins/ease-plugin

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
2.6

Affected versions

1.*

1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.2.6
1.2.7
1.2.8
1.2.9
1.2.10
1.2.11
1.2.12

2.*

2.0
2.1
2.2
2.5
2.6