Threats affecting pkg:github/Jpom

Jpom versions up to 2.11.12 have an authorization bypass vulnerability in the SshFileController. Authenticated users with SSH file permissions in any workspace can exploit this flaw by supplying foreign SSH asset IDs, allowing them to access SSH hosts of other workspaces. This enables unauthorized reading, modification, and deletion of files across workspaces via multiple endpoints.

Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository existence, determine repository type, and execute git ls-remote commands using other workspaces' stored credentials.