GHSA-rp4x-xpgf-4xv7HighCVSS 7.1

Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection

Published
May 24, 2022
Last Modified
January 29, 2023

🔗 CVE IDs covered (1)

CVE-2020-2196 →

📋 Description

Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints.

This allows attackers to perform the following actions:

  • Restart the Selenium Grid hub.
  • Delete or replace the plugin configuration.
  • Start, stop, or restart Selenium configurations on specific nodes.

Through carefully chosen configuration parameters, these actions can result in OS command injection on the Jenkins controller.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:selenium:<= 3.141.59

🔗 References (5)