Cross-site Request Forgery (CSRF) Affecting io.jenkins.docker:docker-plugin package, versions [,1.1.7)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.Test your applications
16 Jul 2019
11 Jul 2019
Oleg Nenashev, CloudBees, Inc.
How to fix?
io.jenkins.docker:docker-plugin to version 1.1.7 or higher.
io.jenkins.docker:docker-plugin is a plugin that allows slaves to be dynamically provisioned using Docker.
Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF). The plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Additionally, this form validation method did not require POST requests, resulting in a cross-site request forgery vulnerability.