CVE-2018-1000144: Jenkins Cucumber Living Documentation Plugin Cross-site Scripting vulnerability
Summary
CVE-2018-1000144: Jenkins Cucumber Living Documentation Plugin Cross-site Scripting vulnerability. Affects org.jenkins-ci.plugins:cucumber-living-documentation versions < 1.1.0. Fixed in 1.1.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Cucumber Living Documentation Plugin is a Maven package that provides functionality for generating living documentation from Cucumber feature files. It allows users to view and interact with the generated documentation within the Jenkins environment. However, versions 1.0.12 and older of the plugin are vulnerable to a cross-site scripting (XSS) attack.
Vulnerability Detail
The vulnerability exists in the CukedoctorBaseAction#doDynamic function of the Jenkins Cucumber Living Documentation Plugin. This function disables the Content-Security-Policy protection for archived artifacts and workspace files, which can be exploited by attackers who can control the content of these files. By injecting malicious scripts, attackers can execute arbitrary code in the context of Jenkins users, potentially leading to unauthorized access, data theft, or other malicious activities. The vulnerability has a CVSS score of 6.1 (Moderate).
How To Fix
Minimum fixed version
1.1.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The Jenkins Cucumber Living Documentation Plugin versions 1.0.12 and older are vulnerable to a cross-site scripting (XSS) attack. It is crucial to update to version 1.1.0 or newer and modify the Content-Security-Policy option in Jenkins to mitigate the risk of exploitation. For additional assistance with vulnerability remediation, please reach out to DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:cucumber-living-documentation →
FAQ
The vulnerability allows attackers to execute arbitrary code in the context of Jenkins users, potentially leading to unauthorized access, data theft, or other malicious activities.
Versions 1.0.12 and older of the plugin are affected.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities using just the pom.xml file.
Yes, the CVSS score for this vulnerability is 6.1 (Moderate).
For further support on vulnerability remediation, you can contact info@devnack.com.
