CVE-2019-1003011
published 2019-02-06CVE-2019-1003011: An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in…
high8.1CVSS 3.1
AVNACLPRLUINSUCHINAH
An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/AbstractChangesSinceMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ChangesSinceLastBuildMacro.java, src/main/java/org/jenkinsci/plugins/tokenmacro/impl/ProjectUrlMacro.java that allows attackers with the ability to control token macro input (such as SCM changelogs) to define recursive input that results in unexpected macro evaluation.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jenkins | active_directory_plugin | — | — |
| jenkins | blue_ocean_plugin | — | — |
| jenkins | config_file_provider_plugin | — | — |
| jenkins | from_job_import_plugin | — | — |
| jenkins | git_plugin | — | — |
| jenkins | github_authentication_plugin | — | — |
| jenkins | groovy_plugin | — | — |
| jenkins | jenkins_startup_or_after_monitoring_plugin | — | — |
| jenkins | job_import_plugin | — | — |
| jenkins | kanboard_plugin | — | — |
| jenkins | monitoring_plugin | — | — |
| jenkins | openid_connect_authentication_plugin | — | — |
| jenkins | script_security_plugin | — | — |
| jenkins | token_macro | <= 2.5 | — |
| jenkins | token_macro_plugin | — | — |
| jenkins | warnings_next_generation_plugin | — | — |
| jenkins | warnings_plugin | — | — |
| jenkins | xml_parser_used_in_job_import_plugin | — | — |
| jenkins_project | jenkins_token_macro_plugin | — | — |
| redhat | openshift_container_platform | — | — |