In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of context actions. If part of the URL includes insufficiently escaped user-provided values, a victim may be tricked into sending a POST request to an unexpected endpoint by opening a context menu.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of
    context actions. If part of the URL includes insufficiently escaped user-provided values, a victim may be
    tricked into sending a POST request to an unexpected endpoint by opening a context menu. (CVE-2023-35141)

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.401.1 or Jenkins weekly prior to 2.400. It is, therefore, affected by the following vulnerability:

  - In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of     context actions. If part of the URL includes insufficiently escaped user-provided values, a victim may be     tricked into sending a POST request to an unexpected endpoint by opening a context menu. (CVE-2023-35141)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b4db7d78-bb62-4f4c-9326-6e9fc2ddd400 advisory.

  - In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of     context actions. If part of the URL includes insufficiently escaped user-provided values, a victim may be     tricked into sending a POST request to an unexpected endpoint by opening a context menu. (CVE-2023-35141)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
413135	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-98fp-r22g-wpj7)	Tenable Cloud Security	SCA Checks	high
413135	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-98fp-r22g-wpj7)	Tenable Self-Hosted Container Security	SCA Checks	high
177395	Jenkins LTS < 2.401.1 / Jenkins weekly < 2.400 XSRF	Nessus	CGI abuses	high
177312	FreeBSD : jenkins -- CSRF protection bypass vulnerability (b4db7d78-bb62-4f4c-9326-6e9fc2ddd400)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2023-35141

high

Tenable Plugins

high

high

high

high