CVE-2022-34780: CSRF vulnerability in XebiaLabs XL Release Plugin allows capturing credentials
Summary
CVE-2022-34780: CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials. Affects com.xebialabs.ci:xlrelease-plugin versions < 22.0.1. Fixed in 22.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
XebiaLabs XL Release Plugin is a Maven package that provides functionality for release management in Jenkins. It allows users to define and manage release pipelines, automate deployment processes, and track the progress of releases. The plugin is widely used in software development organizations to streamline the release management process.
Vulnerability Detail
The XebiaLabs XL Release Plugin version 22.0.0 and earlier is vulnerable to a cross-site request forgery (CSRF) attack. The plugin does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method. This can result in the capture of credentials stored in Jenkins. Additionally, these form validation methods do not require POST requests, further exacerbating the CSRF vulnerability.
How To Fix
Minimum fixed version
22.0.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version of the XebiaLabs XL Release Plugin to ensure the security of the Jenkins environment.
Conclusion
The CSRF vulnerability in XebiaLabs XL Release Plugin can lead to the capture of credentials stored in Jenkins, posing a significant security risk. It is crucial for users to upgrade to version 22.0.1 or later of the plugin to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for com.xebialabs.ci:xlrelease-plugin →
FAQ
This vulnerability allows attackers to capture credentials stored in Jenkins, potentially compromising the security of the Jenkins environment and any connected systems or services.
Users of XebiaLabs XL Release Plugin versions 22.0.0 and earlier are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
Yes, this vulnerability can be exploited remotely by attackers with Overall/Read permission in Jenkins.
Yes, the CVSS score for this vulnerability is 5.4 (Medium).
Related vulnerabilities
Recent vulnerabilities recorded for com.xebialabs.ci:xlrelease-plugin.
