CVE-2018-1000067 json
Server-Side Request Forgery in Jenkins
published 8y ago modified 4mo ago also GHSA-6mv9-hcx5-7mhh , EUVD-2022-2827
- cvss
- 5.3
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.7%
- EPSS 1.7% chance of exploitation in 30 days, percentile 77%
- public exploits
- 0
- none known
Summary
An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.
Patch / fix
- maven org.jenkins-ci.main:jenkins-core 2.89.4, 2.107
Is CVE-2018-1000067 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2018-1000067 updated cvss 6.4
jenkins: Improperly secured form validation for proxy configuration allows Server-Side Request Forgery
-
Red Hat OpenShift Enterprise 3 jenkinsaffected: no fix available
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
1.70% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| GitHub | 3.0 | 5.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.main:jenkins-core | <2.89.4 >=2.90, <2.107 |
2.89.4 2.107 |
Classification
- Weakness
-
- CWE-918 Server-Side Request Forgery
- Technology feeds
References
-
oracle.com
/security-alerts/cpuapr2022.html
web, patch, third-party-advisory
-
github.com
/jenkinsci/jenkins/commit/2d16b459205730d85e51499c2457109b234ca9d9
web
-
jenkins.io
/security/advisory/2018-02-14/#SECURITY-506
web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2018-1000067
advisory
-
github.com
/jenkinsci/jenkins
package
Sources
- CVE List CVE-2018-1000067
- GitHub Advisory GHSA-6mv9-hcx5-7mhh
- NVD CVE-2018-1000067
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.