nuclei-templates/http/cves/2022/CVE-2022-36883.yaml

51 lines
1.8 KiB
YAML

id: CVE-2022-36883
info:
name: Jenkins Git <=4.11.3 - Missing Authorization
author: c-sh0
severity: high
description: Jenkins Git plugin through 4.11.3 contains a missing authorization check. An attacker can trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. This can make it possible to obtain sensitive information, modify data, and/or execute unauthorized operations.
remediation: |
Upgrade to a fixed version of the Jenkins Git plugin (>=4.11.4) or apply the provided patch to mitigate the vulnerability.
reference:
- https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-36883
- https://nvd.nist.gov/vuln/detail/CVE-2022-36883
- http://www.openwall.com/lists/oss-security/2022/07/27/1
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
cvss-score: 7.5
cve-id: CVE-2022-36883
cwe-id: CWE-862
epss-score: 0.00711
epss-percentile: 0.78357
cpe: cpe:2.3:a:jenkins:git:*:*:*:*:*:jenkins:*:*
metadata:
verified: true
max-request: 1
vendor: jenkins
product: git
framework: jenkins
shodan-query: X-Jenkins
tags: cve,cve2022,jenkins,plugin,git,intrusive
http:
- method: GET
path:
- "{{BaseURL}}/git/notifyCommit?url={{randstr}}&branches={{randstr}}"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "repository:"
- SCM API plugin
condition: and
- type: status
status:
- 200
# digest: 4a0a00473045022020f9d0da194be2e727d8973a9920d3e46ad1334b449e611e9ff806e722de2f48022100843e0700e34ac604fcf95e056078644e5d23c090bd536de8134296960f0d300e:922c64590222798bb761d5b6d8e72950