CVE-2023-32985 Jenkins Sidebar Link Plugin vulnerable to Path Traversal
Attackers with Read permission can check for the existence of arbitrary files on the Jenkins controller file system via the Sidebar Link Plugin.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-32985?
CVE-2023-32985 is a medium-severity path traversal vulnerability in Jenkins Sidebar Link Plugin, published on 16 May 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Weakness: CWE-22
Which versions are affected by CVE-2023-32985?
2 open source packages ship an affected version, including org.jenkins-ci.plugins:sidebar-link. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
org.jenkins-ci.plugins:sidebar-link Maven | All versions | 2.2.2 |
org.jenkins-ci.plugins:sidebar-link Maven | All versions | 2.2.2 |
Products include Jenkins Sidebar Link.
How do I fix CVE-2023-32985?
Upgrade org.jenkins-ci.plugins:sidebar-link to 2.2.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-32985 being exploited?
There is no known exploitation of CVE-2023-32985 in the wild and no public exploit code.
Other vulnerabilities in Jenkins Sidebar Link Plugin
Sources
Also known as GHSA-pp8m-prr7-wr8w.