CVE-2022-27204 CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF

High 8.8 Published 15 Mar 2022 Updated 3 Aug 2024

Attackers can exploit CSRF in the Jenkins Extended Choice Parameter Plugin to force connections to attacker-controlled URLs.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2022-27204?

CVE-2022-27204 is a high-severity vulnerability in Jenkins Extended Choice Parameter Plugin, published on 15 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to connect to an attacker-specified URL.

Weakness: CWE-352

Which versions are affected by CVE-2022-27204?

2 open source packages ship an affected version, including org.jenkins-ci.plugins:extended-choice-parameter. It affects 1 product.

Package	Affected	Fixed in
`org.jenkins-ci.plugins:extended-choice-parameter` Maven	All versions	`356.va_90a_94ca_62ec`
`org.jenkins-ci.plugins:extended-choice-parameter` Maven	All versions	`356.va_90a_94ca_62ec`

Products include Jenkins Extended Choice Parameter.

How do I fix CVE-2022-27204?

Upgrade org.jenkins-ci.plugins:extended-choice-parameter to 356.va_90a_94ca_62ec or later.

Is CVE-2022-27204 being exploited?

There is no known exploitation of CVE-2022-27204 in the wild and no public exploit code.

Sources

Also known as GHSA-fqpx-xfjr-2qr9.