CVE-2020-2254: Path Traversal Vulnerability in Blue Ocean Plugin
Summary
CVE-2020-2254: Path traversal vulnerability in Blue Ocean Plugin. Affects io.jenkins.blueocean:blueocean versions < 1.23.3. Fixed in 1.23.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Blue Ocean Plugin is a Maven package (io.jenkins.blueocean:blueocean) that provides a user-friendly interface for Jenkins, an open-source automation server. It enhances the Jenkins UI with a modern, intuitive design and offers features for visualizing and managing continuous integration and delivery pipelines. The Blue Ocean Plugin allows users to create and configure items (such as jobs or pipelines) in Jenkins. However, versions 1.23.2 and earlier of the plugin contain a path traversal vulnerability.
Vulnerability Detail
The path traversal vulnerability in Blue Ocean Plugin versions 1.23.2 and earlier is due to an undocumented feature flag called blueocean.features.GIT_READ_SAVE_TYPE. When this flag is set to clone, an attacker with Item/Configure or Item/Create permission can exploit it to read arbitrary files on the Jenkins controller file system. This can lead to unauthorized access to sensitive information stored on the server. The vulnerability has a CVSS score of 5.3 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
How To Fix
Minimum fixed version
1.23.3
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading the Blue Ocean Plugin is not immediately feasible, a temporary workaround is to disable the affected feature flag blueocean.features.GIT_READ_SAVE_TYPE. This can be done by modifying the plugin configuration or removing the flag from the codebase. However, it is strongly advised to upgrade to the latest version as soon as possible to fully address the vulnerability.
Conclusion
The path traversal vulnerability in Blue Ocean Plugin versions 1.23.2 and earlier can be mitigated by upgrading to version 1.23.3 or later. It is important to promptly address this vulnerability to prevent unauthorized access to sensitive files on the Jenkins controller file system. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for io.jenkins.blueocean:blueocean →
FAQ
The vulnerability allows an attacker to read arbitrary files on the Jenkins controller file system, potentially exposing sensitive information.
Users of Blue Ocean Plugin versions 1.23.2 and earlier are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
Yes, the CVSS score for this vulnerability is 5.3 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
The recommended mitigation strategy is to upgrade the Blue Ocean Plugin to version 1.23.3 or later.
Related vulnerabilities
Recent vulnerabilities recorded for io.jenkins.blueocean:blueocean.
