Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1oNjQ4LWdqMzQtNXg0cs4AAqqG
Agent-to-controller security bypass in Jenkins Squash TM Publisher (Squash4Jenkins) Plugin allows writing arbitrary files
Jenkins Squash TM Publisher (Squash4Jenkins) Plugin 1.0.0 and earlier implements an agent-to-controller message that does not implement any validation of its input, allowing attackers able to control agent processes to replace arbitrary files on the Jenkins controller file system with an attacker-controlled JSON string.
Permalink: https://github.com/advisories/GHSA-h648-gj34-5x4rJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oNjQ4LWdqMzQtNXg0cs4AAqqG
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: 6 months ago
CVSS Score: 8.1
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Identifiers: GHSA-h648-gj34-5x4r, CVE-2021-43578
References:
- https://nvd.nist.gov/vuln/detail/CVE-2021-43578
- https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2525
- http://www.openwall.com/lists/oss-security/2021/11/12/1
- https://github.com/advisories/GHSA-h648-gj34-5x4r
Affected Packages
maven:org.jenkins-ci.plugins:squashtm-publisher-plugin
Affected Version Ranges: <= 1.0.0No known fixed version