Medium severity · published Oct 19, 2022
CVE-2022-43418
A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified…
4.3
CVSS
0.5%
EPSS
No
On KEV
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JK
Jenkins Katalon Plugin · Jenkins project
through 1.0.33 · source: vendor
KA
Katalon · Jenkins
before 1.0.34 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-43418
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-43418
Mailing List
http://www.openwall.com/lists/oss-security/2022/10/19/3
Vendor Advisory
https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2845%20%282%29
More from Jenkins Katalon Plugin
8.8
CVE-2022-43416
Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable…
6.5
CVE-2022-43419
Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read…
4.3
CVE-2022-43417
Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an…