Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS02OTg3LXhjY3YtZmhqcM4AAzW0
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Jenkins Pipeline Utility Steps Plugin provides the untar
and unzip
Pipeline steps to extract archives into job workspaces.
Pipeline Utility Steps Plugin 2.15.2 and earlier does not validate or limit file paths of files contained within these archives.
This allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.
Pipeline Utility Steps Plugin 2.15.3 rejects extraction of files in tar
and zip
archives that would be placed outside the expected destination directory.
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OTg3LXhjY3YtZmhqcM4AAzW0
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 1 year ago
Updated: 5 months ago
CVSS Score: 6.3
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Identifiers: GHSA-6987-xccv-fhjp, CVE-2023-32981
References:
- https://nvd.nist.gov/vuln/detail/CVE-2023-32981
- https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196
- https://github.com/jenkinsci/pipeline-utility-steps-plugin/commit/0ba4f329ee27c023609653e25bdd5604c5e46a11
- https://github.com/advisories/GHSA-6987-xccv-fhjp
Blast Radius: 1.0
Affected Packages
maven:org.jenkins-ci.plugins:pipeline-utility-steps
Affected Version Ranges: < 2.15.3Fixed in: 2.15.3