CVE-2023-32999: CSRF
A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
Other sources
Jenkins AppSpider Plugin 1.0.15 and earlier does not perform a permission check in a method implementing form validation.
This allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
AppSpider Plugin 1.0.16 requires POST requests and Overall/Administer permission for the affected form validation method.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/com.rapid7:jenkinsci-appspider-pluginto a version that resolves this vulnerability.Fixed in 1.0.16
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32999?
CVE-2023-32999 is rated as a critical severity vulnerability due to its ability to allow attackers to exploit it with minimal privileges.
How do I fix CVE-2023-32999?
To fix CVE-2023-32999, update the Jenkins AppSpider Plugin to version 1.0.16 or later.
Who is affected by CVE-2023-32999?
CVE-2023-32999 affects users running Jenkins AppSpider Plugin version 1.0.15 and earlier.
What kind of attack can be carried out using CVE-2023-32999?
CVE-2023-32999 allows attackers to send unauthorized HTTP POST requests with arbitrary JSON payloads to specified URLs.
What permissions are required to exploit CVE-2023-32999?
Attackers need Overall/Read permission in Jenkins to exploit CVE-2023-32999.