CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
- Record
CVE-2022-43408- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List
Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
- Record
CVE-2022-43408- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
EUVDEUVD-2022-7096
Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
- Record
EUVD-2022-7096- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g975-f26h-93g8
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Jenkins Pipeline: Stage View Plugin provides a visualization of Pipeline builds. It also allows users to interact with input steps from Pipeline: Input Step Plugin.
Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of input steps when using it to generate URLs to proceed or abort Pipeline builds.
This allows attackers able to configure Pipelines to specify input step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
Pipeline: Stage View Plugin 2.27 correctly encodes the ID of input steps when using it to generate URLs to proceed or abort Pipeline builds.
- Record
GHSA-g975-f26h-93g8- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-352, CWE-838
- Updated
- 2026-11-02
OSVGHSA-g975-f26h-93g8
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Jenkins Pipeline: Stage View Plugin provides a visualization of Pipeline builds. It also allows users to interact with input steps from Pipeline: Input Step Plugin.
Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of input steps when using it to generate URLs to proceed or abort Pipeline builds.
This allows attackers able to configure Pipelines to specify input step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
Pipeline: Stage View Plugin 2.27 correctly encodes the ID of input steps when using it to generate URLs to proceed or abort Pipeline builds.
- Record
GHSA-g975-f26h-93g8- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-352, CWE-838
- Updated
- 2026-11-02
OSVRHSA-2023:0560
Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update
- Record
RHSA-2023:0560- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:0777
Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update
- Record
RHSA-2023:0777- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1064
Red Hat Security Advisory: OpenShift Developer Tools and Services for OCP 4.12 security update
- Record
RHSA-2023:1064- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:3198
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2023:3198- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-viewMaven |
before 2.24.2 | 2.24.2 |
org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-viewMaven |
2.25 up to 2.27 | 2.27 |
org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-viewMaven |
2.25 up to 2.27, plus listed versions 2.26 |
2.27 |
org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-viewMaven |
before 2.24.2, plus listed versions 1.01.0-alpha-11.0-alpha-21.11.2 Show 34 moreShow less1.2-beta-11.31.41.51.61.71.8-beta-12.02.0-beta-12.12.102.112.122.132.142.152.162.172.182.192.22.202.212.222.232.242.32.42.52.62.7-stepstorage3-alpha2.7-stepstorage4-beta2.82.9 |
2.24.2 |
jenkins-2-pluginsRed Hat:openshift:4.10::el8 From an advisory covering 23 CVEs |
before 0:4.10.1675144701-1.el8 | 0:4.10.1675144701-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.9::el8 From an advisory covering 26 CVEs |
before 0:4.9.1675668922-1.el8 | 0:4.9.1675668922-1.el8 |
jenkinsRed Hat:openshift:4.9::el8 From an advisory covering 26 CVEs |
before 0:2.361.1.1675668150-1.el8 | 0:2.361.1.1675668150-1.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.12::el8 From an advisory covering 15 CVEs |
before 0:4.12.1675702407-1.el8 | 0:4.12.1675702407-1.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.11::el8 From an advisory covering 22 CVEs |
before 0:4.11.1683009941-1.el8 | 0:4.11.1683009941-1.el8 |
jenkinsRed Hat:ocp_tools:4.11::el8 From an advisory covering 22 CVEs |
before 0:2.387.1.1683009763-3.el8 | 0:2.387.1.1683009763-3.el8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-43408 is a medium vulnerability (CVSS 6.5) in Jenkins Project Pipeline: Stage View Plugin, published October 19, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view 2.24.2.
References
jenkins.io/security/advisory/2022-10-19
openwall.com/lists/oss-security/2022/10/19/3
nvd.nist.gov/vuln/detail/CVE-2022-43408
github.com/jenkinsci/pipeline-stage-view-plugin/commit/cee275109ee748fa9f599ec60159807a28a2933f
access.redhat.com/errata/RHSA-2023:0560
Show 177 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1856376
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0560.json
cve.org/CVERecord?id=CVE-2020-7692
bitbucket.org/snakeyaml/snakeyaml/issues/525
mail-archive.com/[email protected]/msg39312.html
docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html
maven.apache.org/docs/3.8.1/release-notes.html
blogs.apache.org/security/entry/cve-2022-42889
lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
seclists.org/oss-sec/2022/q4/22