ghsa-gfhj-524q-gcrm
Vulnerability from github
Published
2022-05-24 17:23
Modified
2022-12-27 22:58
Severity
Summary
Stored XSS vulnerability in Jenkins console links
Details
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the href attribute of links to downstream jobs displayed in the build console page. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.
Jenkins 2.245, LTS 2.235.2 escapes the href attribute of these links.
{
"affected": [
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 2.235.1"
},
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.main:jenkins-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.235.2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"last_known_affected_version_range": "\u003c= 2.244"
},
"package": {
"ecosystem": "Maven",
"name": "org.jenkins-ci.main:jenkins-core"
},
"ranges": [
{
"events": [
{
"introduced": "2.236"
},
{
"fixed": "2.245"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2020-2223"
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"github_reviewed": true,
"github_reviewed_at": "2022-06-24T00:54:18Z",
"nvd_published_at": "2020-07-15T18:15:00Z",
"severity": "HIGH"
},
"details": "Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the `href` attribute of links to downstream jobs displayed in the build console page. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.\n\nJenkins 2.245, LTS 2.235.2 escapes the `href` attribute of these links.",
"id": "GHSA-gfhj-524q-gcrm",
"modified": "2022-12-27T22:58:48Z",
"published": "2022-05-24T17:23:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2223"
},
{
"type": "WEB",
"url": "https://github.com/jenkinsci/jenkins/commit/11f4a351224ef04cfeb9c7636fb1590b67543f3c"
},
{
"type": "PACKAGE",
"url": "https://github.com/jenkinsci/jenkins"
},
{
"type": "WEB",
"url": "https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1945"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2020/07/15/5"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Stored XSS vulnerability in Jenkins console links"
}
Loading...