Stored Cross-site Scripting in folder-auth plugin
Summary
GHSA-5vjc-qx43-r747: Stored Cross-site Scripting in folder-auth plugin. Affects io.jenkins.plugins:folder-auth versions < 1.4. Fixed in 1.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The folder-auth plugin is a Maven package named 'io.jenkins.plugins:folder-auth'. It is a plugin for the Jenkins automation server that provides folder-based authorization strategy. This plugin allows administrators to define access control policies based on folders and roles. It is commonly used to manage permissions and restrict access to specific folders within Jenkins.
Vulnerability Detail
The folder-auth plugin version 1.3 and earlier is vulnerable to a stored cross-site scripting (XSS) attack. This vulnerability occurs because the plugin does not properly escape the names of roles shown on the configuration form. An attacker with Overall/Administer permission can exploit this vulnerability to inject malicious scripts into the web application, potentially leading to unauthorized access, data theft, or other malicious activities. The vulnerability has been assigned the identifier GHSA-5vjc-qx43-r747 and has a severity level of MODERATE according to the Common Vulnerability Scoring System (CVSS). The vulnerability is classified under CWE-79, which is the category for Cross-Site Scripting (XSS) vulnerabilities.
How To Fix
Minimum fixed version
1.4
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to version 1.4 is not immediately feasible, a temporary workaround is to restrict access to the Jenkins instance and ensure that only trusted users have Overall/Administer permission. Additionally, it is recommended to regularly monitor the Jenkins instance for any suspicious activities or unauthorized access attempts.
Conclusion
The folder-auth plugin version 1.3 and earlier is vulnerable to a stored cross-site scripting (XSS) attack. To mitigate this vulnerability, it is recommended to upgrade to version 1.4 or later of the plugin. If immediate upgrade is not possible, restrict access to the Jenkins instance and monitor for any suspicious activities. For additional support, please contact DevNack.com.
See every vulnerability recorded for io.jenkins.plugins:folder-auth →
FAQ
The vulnerability allows an attacker with Overall/Administer permission to inject malicious scripts into the web application, potentially leading to unauthorized access, data theft, or other malicious activities.
You can use the Vulert Playground at Vulert Scanner to check if your Jenkins instance is affected by this vulnerability. Simply provide the pom.xml file of your Jenkins project, and Vulert will analyze it for any open-source vulnerabilities, including this one.
At the time of this advisory, there are no known public exploits specifically targeting this vulnerability in the folder-auth plugin. However, it is important to promptly apply the recommended fix to mitigate the risk of potential attacks.
While upgrading to version 1.4 is the recommended solution, you can apply temporary mitigations by restricting access to the Jenkins instance and ensuring that only trusted users have Overall/Administer permission. Regular monitoring of the instance for any suspicious activities is also advised.
For further support and assistance in remediating this vulnerability, you can contact info@devnack.com. Our team of experts will be happy to assist you in securing your Jenkins instance.
References
Related vulnerabilities
Recent vulnerabilities recorded for io.jenkins.plugins:folder-auth.
