RadioCSIRT - WID-SEC-W-2023-3152 - Vulnerability-Lookup

WID-SEC-W-2023-3152

Vulnerability from csaf_certbund - Published: 2023-12-13 23:00 - Updated: 2024-02-20 23:00

Summary

Jenkins Plugins: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen CSRF-Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.

Betroffene Betriebssysteme: - UNIX - Linux - Windows - Sonstiges

CVE-2023-50779

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Atlassian Confluence < 8.5.5 Atlassian / Confluence		< 8.5.5
Atlassian Confluence < 8.7.2 Atlassian / Confluence		< 8.7.2
Atlassian Confluence < 7.19.18 Atlassian / Confluence		< 7.19.18
Atlassian Confluence < 8.8.0 Atlassian / Confluence		< 8.8.0

Last affected 5 products

Product	Identifier	Version	Remediation
Jenkins Jenkins Deployment Dashboard Plugin <= 1.0.10 Jenkins / Jenkins		Deployment Dashboard Plugin <= 1.0.10
Jenkins Jenkins HTMLResource Plugin <= 1.02 Jenkins / Jenkins		HTMLResource Plugin <= 1.02
Jenkins Jenkins Dingding JSON Pusher Plugin <= 2.0 Jenkins / Jenkins		Dingding JSON Pusher Plugin <= 2.0
Jenkins Jenkins PaaSLane Estimate Plugin <= 1.0.4 Jenkins / Jenkins		PaaSLane Estimate Plugin <= 1.0.4
Jenkins Jenkins OpenId Connect Authentication Plugin <= 2.6 Jenkins / Jenkins		OpenId Connect Authentication Plugin <= 2.6

CVE-2023-50778

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50777

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50776

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50775

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50774

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50773

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50772

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50771

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50770

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50769

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50768

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50767

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50766

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50765

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-50764

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

CVE-2023-5072

Affected products

Known affected 4 products, the same list as for CVE-2023-50779

Last affected 5 products, the same list as for CVE-2023-50779

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.jenkins.io/security/advisory/2023-12-13/	external
https://confluence.atlassian.com/security/securit…	external

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterst\u00fctzung bei Softwareentwicklungen aller Art.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen CSRF-Angriff durchzuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-3152 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3152.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-3152 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3152"
      },
      {
        "category": "external",
        "summary": "Jenkins Security Advisory 2023-12-13 vom 2023-12-13",
        "url": "https://www.jenkins.io/security/advisory/2023-12-13/"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Bulletin Februar 2024",
        "url": "https://confluence.atlassian.com/security/security-bulletin-february-20-2024-1354501606.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Jenkins Plugins: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-02-20T23:00:00.000+00:00",
      "generator": {
        "date": "2026-07-16T16:56:44.443+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2023-3152",
      "initial_release_date": "2023-12-13T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-12-13T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-02-20T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 7.19.18",
                "product": {
                  "name": "Atlassian Confluence \u003c 7.19.18",
                  "product_id": "T032051"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c 8.5.5",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.5.5",
                  "product_id": "T032052"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c 8.7.2",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.7.2",
                  "product_id": "T032053"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c 8.8.0",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.8.0",
                  "product_id": "T033011"
                }
              }
            ],
            "category": "product_name",
            "name": "Confluence"
          }
        ],
        "category": "vendor",
        "name": "Atlassian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Analysis Model API Plugin \u003c 11.13.0",
                "product": {
                  "name": "Jenkins Jenkins Analysis Model API Plugin \u003c 11.13.0",
                  "product_id": "T031701"
                }
              },
              {
                "category": "product_version_range",
                "name": "Nexus Platform Plugin \u003c 3.18.1-01",
                "product": {
                  "name": "Jenkins Jenkins Nexus Platform Plugin \u003c 3.18.1-01",
                  "product_id": "T031702"
                }
              },
              {
                "category": "product_version_range",
                "name": "Scriptler Plugin \u003c",
                "product": {
                  "name": "Jenkins Jenkins Scriptler Plugin \u003c",
                  "product_id": "T031703"
                }
              },
              {
                "category": "product_version_range",
                "name": "Deployment Dashboard Plugin \u003c= 1.0.10",
                "product": {
                  "name": "Jenkins Jenkins Deployment Dashboard Plugin \u003c= 1.0.10",
                  "product_id": "T031704"
                }
              },
              {
                "category": "product_version_range",
                "name": "Dingding JSON Pusher Plugin \u003c= 2.0",
                "product": {
                  "name": "Jenkins Jenkins Dingding JSON Pusher Plugin \u003c= 2.0",
                  "product_id": "T031705"
                }
              },
              {
                "category": "product_version_range",
                "name": "HTMLResource Plugin \u003c= 1.02",
                "product": {
                  "name": "Jenkins Jenkins HTMLResource Plugin \u003c= 1.02",
                  "product_id": "T031706"
                }
              },
              {
                "category": "product_version_range",
                "name": "OpenId Connect Authentication Plugin \u003c= 2.6",
                "product": {
                  "name": "Jenkins Jenkins OpenId Connect Authentication Plugin \u003c= 2.6",
                  "product_id": "T031707"
                }
              },
              {
                "category": "product_version_range",
                "name": "PaaSLane Estimate Plugin \u003c= 1.0.4",
                "product": {
                  "name": "Jenkins Jenkins PaaSLane Estimate Plugin \u003c= 1.0.4",
                  "product_id": "T031708"
                }
              }
            ],
            "category": "product_name",
            "name": "Jenkins"
          }
        ],
        "category": "vendor",
        "name": "Jenkins"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-50779",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50779"
    },
    {
      "cve": "CVE-2023-50778",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50778"
    },
    {
      "cve": "CVE-2023-50777",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50777"
    },
    {
      "cve": "CVE-2023-50776",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50776"
    },
    {
      "cve": "CVE-2023-50775",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50775"
    },
    {
      "cve": "CVE-2023-50774",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50774"
    },
    {
      "cve": "CVE-2023-50773",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50773"
    },
    {
      "cve": "CVE-2023-50772",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50772"
    },
    {
      "cve": "CVE-2023-50771",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50771"
    },
    {
      "cve": "CVE-2023-50770",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50770"
    },
    {
      "cve": "CVE-2023-50769",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50769"
    },
    {
      "cve": "CVE-2023-50768",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50768"
    },
    {
      "cve": "CVE-2023-50767",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50767"
    },
    {
      "cve": "CVE-2023-50766",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50766"
    },
    {
      "cve": "CVE-2023-50765",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50765"
    },
    {
      "cve": "CVE-2023-50764",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-50764"
    },
    {
      "cve": "CVE-2023-5072",
      "product_status": {
        "known_affected": [
          "T032052",
          "T032053",
          "T032051",
          "T033011"
        ],
        "last_affected": [
          "T031704",
          "T031706",
          "T031705",
          "T031708",
          "T031707"
        ]
      },
      "release_date": "2023-12-13T23:00:00.000+00:00",
      "title": "CVE-2023-5072"
    }
  ]
}

CVE-2023-50773 (GCVE-0-2023-50773)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-02-13 17:19

Summary

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Severity

No CVSS data available.

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Dingding JSON Pusher Plugin	Affected: 0 , ≤ 2.0 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:42.974Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3184"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins Dingding JSON Pusher Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "2.0",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:16.853Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3184"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50773",
    "datePublished": "2023-12-13T17:30:19.459Z",
    "dateReserved": "2023-12-13T13:06:36.477Z",
    "dateUpdated": "2025-02-13T17:19:36.476Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50774 (GCVE-0-2023-50774)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-02-13 17:19

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary files on the Jenkins controller file system.

Severity

No CVSS data available.

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins HTMLResource Plugin	Affected: 0 , ≤ 1.02 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:42.932Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3183"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins HTMLResource Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.02",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary files on the Jenkins controller file system."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:17.897Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3183"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50774",
    "datePublished": "2023-12-13T17:30:20.085Z",
    "dateReserved": "2023-12-13T13:06:36.477Z",
    "dateUpdated": "2025-02-13T17:19:37.056Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50775 (GCVE-0-2023-50775)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-02-13 17:19

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.

Severity

No CVSS data available.

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins Deployment Dashboard Plugin	Affected: 0 , ≤ 1.0.10 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:43.129Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3092"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins Deployment Dashboard Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.0.10",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:18.993Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3092"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50775",
    "datePublished": "2023-12-13T17:30:20.742Z",
    "dateReserved": "2023-12-13T13:06:36.477Z",
    "dateUpdated": "2025-02-13T17:19:37.661Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50776 (GCVE-0-2023-50776)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-02-13 17:19

Summary

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Severity

No CVSS data available.

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins PaaSLane Estimate Plugin	Affected: 0 , ≤ 1.0.4 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:42.964Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins PaaSLane Estimate Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:20.050Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50776",
    "datePublished": "2023-12-13T17:30:21.372Z",
    "dateReserved": "2023-12-13T13:06:36.478Z",
    "dateUpdated": "2025-02-13T17:19:38.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50777 (GCVE-0-2023-50777)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-05-22 18:09

Summary

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-22 18:06 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins PaaSLane Estimate Plugin	Affected: 0 , ≤ 1.0.4 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:43.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-50777",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-22T18:06:42.908862Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-22T18:09:21.987Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins PaaSLane Estimate Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:21.113Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50777",
    "datePublished": "2023-12-13T17:30:21.995Z",
    "dateReserved": "2023-12-13T13:06:36.478Z",
    "dateUpdated": "2025-05-22T18:09:21.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50778 (GCVE-0-2023-50778)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-02-13 17:19

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified token.

Severity

No CVSS data available.

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins PaaSLane Estimate Plugin	Affected: 0 , ≤ 1.0.4 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:43.567Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins PaaSLane Estimate Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified token."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:22.082Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50778",
    "datePublished": "2023-12-13T17:30:22.627Z",
    "dateReserved": "2023-12-13T13:06:36.478Z",
    "dateUpdated": "2025-02-13T17:19:39.337Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50779 (GCVE-0-2023-50779)

Vulnerability from cvelistv5 – Published: 2023-12-13 17:30 – Updated: 2025-02-13 17:19

Summary

Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token.

Severity

No CVSS data available.

Assigner

jenkins mitre root Scorecard

References

2 references

URL	Tags
https://www.jenkins.io/security/advisory/2023-12-…	vendor-advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4

Impacted products

1 product

Vendor	Product	Version
Jenkins Project	Jenkins PaaSLane Estimate Plugin	Affected: 0 , ≤ 1.0.4 (maven)

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:23:43.492Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Jenkins Security Advisory 2023-12-13",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Jenkins PaaSLane Estimate Plugin",
          "vendor": "Jenkins Project",
          "versions": [
            {
              "lessThanOrEqual": "1.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "maven"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-13T17:35:23.213Z",
        "orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
        "shortName": "jenkins"
      },
      "references": [
        {
          "name": "Jenkins Security Advisory 2023-12-13",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/12/13/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b",
    "assignerShortName": "jenkins",
    "cveId": "CVE-2023-50779",
    "datePublished": "2023-12-13T17:30:23.280Z",
    "dateReserved": "2023-12-13T13:06:36.478Z",
    "dateUpdated": "2025-02-13T17:19:40.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.