jenkinsci/semantic-versioning-plugin · Security
Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
- GHSA ID
- GHSA-pcc2-w6m8-x5w4
- CVE ID
- CVE-2023-24429
- Severity
- critical
- Published
- Updated
- CVSS
- 9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.
CWEs
- CWE-611 · Improper Restriction of XML External Entity Reference