High · 7.1 CVE-2020-2196 EUVD-2022-5205GHSA-rp4x-xpgf-4xv7

Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection

Published Jun 3, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Selenium Plugin Package: org.jenkins-ci.plugins:selenium Category: Web / CMS Ecosystem: Maven

Description

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.

Affected products

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins Selenium Plugin	unspecified – ≤ 3.141.59	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:selenium	<= 3.141.59	—	GHSA-rp4x-xpgf-4xv7

References

https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1766
[oss-security] 20200603 Multiple vulnerabilities in Jenkins plugins mailing-list
[oss-security] 20220414 Re: Browser-mediated attacks on WebDriver servers mailing-list