GitHub Advisoryadvisory · Maven

GHSA-2wvv-phhw-qvmc Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting

HIGH Published 2023-05-16 Modified 2023-05-17 Official page ↗
Aliases
CVE-2023-32977
Ecosystem
Maven
Packages
org.jenkins-ci.plugins.workflow:workflow-job
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-79
Reviewed
2023-05-17

Affected packages

• Maven org.jenkins-ci.plugins.workflow:workflow-job: < 1295.v395eb → fixed in 1295.v395eb

Description

Jenkins Pipeline: Job Plugin 1292.v27d8cc3e2602 and earlier does not escape the display name of the build that caused an earlier build to be aborted, when "Do not allow concurrent builds" is set. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately. The Jenkins security team is not aware of any plugins that allow the exploitation of this vulnerability, as the build name must be set before the build starts. Pipeline: Job Plugin 1295.v395eb_7400005 escapes the display name of the build that caused an earlier build to be aborted.

Related

Alias · CVE (1)

  • CVE-2023-32977 Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References