Arbitrary File Replacement in Jenkins Squash TM Publisher Plugin by CloudBees
CVE-2021-43578

8.1HIGH

Key Information:

Vendor
Jenkins
Status
Jenkins Squash Tm Publisher (squash4jenkins) Plugin
Vendor
CVE Published:
12 November 2021

Summary

The Jenkins Squash TM Publisher Plugin prior to version 1.0.0 lacks input validation on messages sent from agents to the controller. This flaw allows attackers who can control agent processes to overwrite arbitrary files in the Jenkins controller's file system with their own malicious JSON strings, potentially leading to further exploitation of the Jenkins environment.

Affected Version(s)

Jenkins Squash TM Publisher (Squash4Jenkins) Plugin <= 1.0.0

References

https://www.jenkins.io/security/advisory/2021-11-12/#SECU...
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2021/11/12/1
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.