CVE-2024-23900
published 2024-01-24CVE-2024-23900: Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with…
PriorityP423medium4.3CVSS 3.1
AVNACLPRLUINSUCNILAN
EPSS
0.69%
50.9th percentile
Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file system with content not controllable by the attackers.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jenkins | git_server_plugin | — | — |
| jenkins | gitlab_branch_source_plugin | — | — |
| jenkins | jenkins_core | — | — |
| jenkins | jenkins_lts | — | — |
| jenkins | jenkins_uses_the_strict_crumb_issuer_plugin | — | — |
| jenkins | jenkins_weekly | — | — |
| jenkins | log_command_plugin | — | — |
| jenkins | matrix_project | <= 822.v01b_8c85d16d2 | — |
| jenkins | matrix_project_plugin | — | — |
| jenkins | qualys_policy_compliance_scanning_connector_plugin | — | — |
| jenkins | red_hat_dependency_analytics_plugin | — | — |
| jenkins_project | jenkins_matrix_project_plugin | <= 822.v01b_8c85d16d2 | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Path traversal vulnerability in Jenkins Matrix Project Plugin
ghsa·2024-01-24
CVE-2024-23900 [MEDIUM] CWE-22 Path traversal vulnerability in Jenkins Matrix Project Plugin
Path traversal vulnerability in Jenkins Matrix Project Plugin
Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects submitted through the `config.xml` REST API endpoint.
This allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system with content not controllable by the attackers.
Matrix Project Plugin 822.824.v14451b_c0fd42 sanitizes user-defined axis names of Multi-configuration project.
OSV
Path traversal vulnerability in Jenkins Matrix Project Plugin
osv·2024-01-24
CVE-2024-23900 [MEDIUM] Path traversal vulnerability in Jenkins Matrix Project Plugin
Path traversal vulnerability in Jenkins Matrix Project Plugin
Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects submitted through the `config.xml` REST API endpoint.
This allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system with content not controllable by the attackers.
Matrix Project Plugin 822.824.v14451b_c0fd42 sanitizes user-defined axis names of Multi-configuration project.
Jenkins
Jenkins Security Advisory 2024-01-24
vendor_jenkins·2024-01-24·CVSS 9.8
CVE-2023-6147 [CRITICAL] Jenkins Security Advisory 2024-01-24
Title: Jenkins Security Advisory 2024-01-24
Jenkins Security Advisory 2024-01-24
Jenkins Security Home
For Administrators
Overview
Terminology
Vulnerabilities and Scoring
Security Advisories
Security Issues
Advisory Schedule
Vulnerabilities in Plugins
How We Fix Security Issues
For Reporters
Reporting Vulnerabilities
Jenkins CNA
For Maintainers
Overview
Vulnerabilities in Plugins
Jenkins Security Team
About
Contributions
This advisory announces vulnerabilities in the following Jenkins deliverables:
Jenkins (core)
Git server
Plugin
GitLab Branch Source
Plugin
Log Command
Plugin
Matrix Project
Plugin
Qualys Policy Compliance Scanning Connector
Plugin
Red Hat Depen
Red Hat
jenkins-2-plugins: matrix-project plugin path traversal vulnerability
vendor_redhat·2024-01-09·CVSS 4.3
CVE-2024-23900 [MEDIUM] CWE-23 jenkins-2-plugins: matrix-project plugin path traversal vulnerability
jenkins-2-plugins: matrix-project plugin path traversal vulnerability
Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file system with content not controllable by the attackers.
A flaw was found in The Matrix Project Plugin for Jenkins, which does not sanitize user-defined axis names of multi-configuration projects submitted through the config.xml REST API endpoint. This issue may allow attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system with content not controllable by the attackers.
Package: jenkins (Red Hat OpenShi
No detection rules found.
No public exploits indexed.
2024-01-24
Published