CVE-2022-28157: Path Traversal in Phoenix AutoTest Plugin
Summary
CVE-2022-28157: Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin. Affects com.surenpi.jenkins:phoenix-autotest versions < 1.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Phoenix AutoTest Plugin is a Maven package (com.surenpi.jenkins:phoenix-autotest) used in Jenkins Pipeline. It provides functionality for automated testing in Jenkins. The plugin allows users with Item/Configure permission to upload files from the Jenkins controller to an FTP server via FTP. This feature is intended to facilitate file transfer for testing purposes.
Vulnerability Detail
The Phoenix AutoTest Plugin version 1.3 and earlier is vulnerable to a path traversal attack. Attackers with Item/Configure permission can exploit this vulnerability to upload arbitrary files from the Jenkins controller to an attacker-specified FTP server. By manipulating the file path during the upload process, an attacker can traverse directories and potentially access sensitive files on the Jenkins controller. This can lead to unauthorized disclosure of information or even remote code execution.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can revoke Item/Configure permission for potentially untrusted users. This will prevent them from exploiting the vulnerability. However, this workaround may impact legitimate use cases where file uploads are required for testing. It is recommended to apply the official fix as soon as possible.
Conclusion
The Phoenix AutoTest Plugin version 1.3 and earlier is vulnerable to a path traversal attack, allowing attackers to upload arbitrary files from the Jenkins controller to an FTP server. To mitigate this vulnerability, it is recommended to upgrade to version 1.4 or later of the plugin and review user permissions. Applying the official fix will prevent unauthorized file uploads and potential disclosure of sensitive information. For additional support, please contact DevNack.com.
See every vulnerability recorded for com.surenpi.jenkins:phoenix-autotest →
FAQ
This vulnerability allows attackers to upload arbitrary files from the Jenkins controller to an FTP server. Depending on the permissions of the Jenkins controller and the uploaded file, this can lead to unauthorized disclosure of sensitive information or even remote code execution.
Users of Jenkins Pipeline with the Phoenix AutoTest Plugin version 1.3 and earlier are affected by this vulnerability. Specifically, users with Item/Configure permission are at risk.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your pom.xml file, and Vulert will analyze it for open-source vulnerabilities in real-time.
At the time of this report, there are no known public exploits for this vulnerability. However, it is crucial to apply the fix promptly to mitigate the risk of exploitation.
For further support on vulnerability remediation, you can reach out to info@devnack.com. Our team will be happy to assist you in addressing this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for com.surenpi.jenkins:phoenix-autotest.
