PT-2020-15520 · Jenkins · Jenkins Active Choices Plugin+1

Wadeck Follonier · Published 2020-10-08 · Updated 2023-11-02 · CVE-2020-2290

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Active Choices Plugin versions 2.4 and earlier

Description The issue results in a stored cross-site scripting (XSS) vulnerability, which is exploitable by attackers with Job/Configure permission. This occurs because some return values of sandboxed scripts for Reactive Reference Parameters, specifically List and Map return values, are not properly escaped. The vulnerability allows attackers to inject malicious scripts, potentially leading to unauthorized access or data theft.

Recommendations For Jenkins Active Choices Plugin versions 2.4 and earlier, update to version 2.5 or later, which properly escapes all legal return values of sandboxed scripts, thereby resolving the stored XSS vulnerability.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-2290

GHSA-RJCH-J5X9-FGPH

Affected Products

Jenkins

Jenkins Active Choices Plugin

References · 7

• https://jenkins.io/security/advisory/2020-10-08/#SECURITY-2008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2290 · Security Note
• https://osv.dev/vulnerability/GHSA-rjch-j5x9-fgph · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2290 · Vendor Advisory
• https://github.com/jenkinsci/active-choices-plugin/commit/15e3e01929a687965f44d9d06cd2d870628a54dc · Note
• https://github.com/jenkinsci/active-choices-plugin · Note
• http://openwall.com/lists/oss-security/2020/10/08/5 · Note