CVE-2023-24432: CSRF vulnerability in Jenkins Orka Plugin allows capturing credentials
Summary
CVE-2023-24432: CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials. Affects io.jenkins.plugins:macstadium-orka versions < 1.32. Fixed in 1.32. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Jenkins Orka by MacStadium Plugin is a Maven package that provides integration between Jenkins and Orka, a virtualization platform for macOS. It allows users to manage and provision macOS virtual machines for their Jenkins pipelines. The plugin enables seamless interaction with Orka's REST API, providing functionalities such as creating and deleting virtual machines. However, versions 1.31 and earlier of the plugin are vulnerable to a cross-site request forgery (CSRF) attack.
Vulnerability Detail
The CSRF vulnerability in Jenkins Orka Plugin allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method. This allows them to capture credentials stored in Jenkins. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to sensitive information and perform malicious actions within the Jenkins environment.
How To Fix
Minimum fixed version
1.32
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by upgrading to the latest version of the Jenkins Orka Plugin.
Conclusion
The CSRF vulnerability in Jenkins Orka Plugin poses a moderate risk to Jenkins installations using versions 1.31 and earlier of the plugin. To mitigate this vulnerability, it is crucial to upgrade to version 1.32 or later of the Jenkins Orka Plugin. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for io.jenkins.plugins:macstadium-orka →
FAQ
This vulnerability allows attackers to capture credentials stored in Jenkins, potentially leading to unauthorized access and malicious activities within the Jenkins environment.
You can use Vulert's playground (https://vulert.com/scanner) to check if your Jenkins installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the pom.xml file.
At the time of this advisory, there is no known public exploit for this vulnerability. However, it is important to apply the fix as soon as possible to prevent potential exploitation.
If you are unable to upgrade to the latest version of the Jenkins Orka Plugin immediately, it is recommended to restrict access to the Jenkins environment and closely monitor for any suspicious activities.
You can find more information about this vulnerability in the GitHub Advisory Database (https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json).
References
Related vulnerabilities
Recent vulnerabilities recorded for io.jenkins.plugins:macstadium-orka.
