CVE-2022-34179: Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin
Summary
CVE-2022-34179: Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin. Affects org.jenkins-ci.plugins:embeddable-build-status versions < 2.0.4. Fixed in 2.0.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Embeddable Build Status Plugin is a Maven package that provides functionality for displaying build status information in SVG format. It allows users to embed build status images in external systems or web pages. The plugin is widely used in Jenkins installations to provide visual indicators of build statuses. However, versions 2.0.3 and earlier of the plugin are vulnerable to a path traversal vulnerability.
Vulnerability Detail
The vulnerability in Jenkins Embeddable Build Status Plugin 2.0.3 and earlier arises from the insecure handling of the style query parameter. This parameter is used to select a specific SVG image style. However, the plugin does not enforce any restrictions on the possible values for this parameter, allowing an attacker to specify a relative path traversal attack. This enables attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system. The impact of this vulnerability is that unauthorized users can access sensitive files on the Jenkins server.
How To Fix
Minimum fixed version
2.0.4
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version of the plugin to mitigate the risk.
Conclusion
The Jenkins Embeddable Build Status Plugin versions 2.0.3 and earlier are vulnerable to a path traversal attack. Upgrading to version 2.0.4 of the plugin is necessary to fix this vulnerability. It is recommended to follow the provided steps to update the plugin and mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:embeddable-build-status →
FAQ
The vulnerability allows unauthorized users to access sensitive files on the Jenkins server.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
No, there is no known workaround. It is recommended to upgrade to the fixed version of the plugin.
The CVSS score of this vulnerability is 5.3, indicating a moderate severity.
To update the plugin, navigate to the Manage Plugins page in Jenkins, select the Available tab, find the Embeddable Build Status Plugin, and click the Update button.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:embeddable-build-status.
