CVE-2023-35145: Jenkins Sonargraph Integration Plugin Stored Cross-site Scripting
Summary
CVE-2023-35145: Jenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site Scripting. Affects org.jenkins-ci.plugins:sonargraph-integration versions < 5.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Jenkins Sonargraph Integration Plugin is a Maven-based plugin that integrates Sonargraph, a static code analysis tool, into Jenkins. It allows users to analyze and visualize the architecture and quality of their software projects. The plugin provides features such as generating reports, tracking metrics, and identifying code smells and vulnerabilities. However, versions 5.0.1 and earlier of the plugin are vulnerable to a stored cross-site scripting (XSS) attack.
Vulnerability Detail
The vulnerability in the Jenkins Sonargraph Integration Plugin arises from the improper handling of user-supplied input. Specifically, the file path and project name fields in the Log file form validation are not properly escaped, allowing an attacker with Item/Configure permission to inject malicious scripts. This stored XSS vulnerability can be exploited to execute arbitrary code in the context of a user's browser, potentially leading to unauthorized actions, data theft, or further compromise of the Jenkins environment.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the Jenkins Sonargraph Integration Plugin by revoking Item/Configure permission for untrusted users. This can be done by modifying the Jenkins configuration or using a role-based access control (RBAC) plugin to manage permissions. By limiting the ability to configure the plugin, the risk of exploitation can be mitigated.
Conclusion
The Jenkins Sonargraph Integration Plugin versions 5.0.1 and earlier are susceptible to a stored cross-site scripting vulnerability. This can be exploited by an attacker with Item/Configure permission to execute arbitrary code in the context of a user's browser. To mitigate the risk, it is recommended to upgrade to version 5.0.2 or later of the plugin. Restricting access to the plugin for untrusted users can serve as a temporary workaround. For further assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:sonargraph-integration →
FAQ
The vulnerability allows an attacker with Item/Configure permission to execute arbitrary code in the context of a user's browser. This can lead to unauthorized actions, data theft, or further compromise of the Jenkins environment.
No, only versions 5.0.1 and earlier of the plugin are vulnerable to this stored XSS attack. It is recommended to upgrade to version 5.0.2 or later to mitigate the risk.
No, this vulnerability requires an attacker to have Item/Configure permission in the Jenkins environment. However, if an attacker gains such permissions, they can exploit the vulnerability remotely by injecting malicious scripts.
At the time of this report, there are no known public exploits specifically targeting this vulnerability. However, it is important to apply the recommended fixes and keep the Jenkins Sonargraph Integration Plugin up to date to prevent any potential exploitation.
Yes, the CVSS score for this vulnerability is 8.0, indicating a high severity level. It is crucial to address this vulnerability promptly to protect the Jenkins environment.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:sonargraph-integration.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
