PT-2022-22054 · Jenkins · Jenkins Dynamic Extended Choice Parameter Plugin+1

Published 2022-06-22 · Updated 2023-11-03 · CVE-2022-34186

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier

Description The issue is a stored cross-site scripting (XSS) vulnerability that occurs because the plugin does not escape the name and description of Moded Extended Choice parameters on views displaying parameters. This vulnerability is exploitable by attackers with Item/Configure permission. Exploitation requires that parameters are listed on another page and that those pages are not hardened to prevent exploitation. It's noted that Jenkins (core) has prevented exploitation of vulnerabilities of this kind on certain pages since version 2.44 and LTS 2.32.2.

Recommendations For Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-34186

GHSA-7558-6Q45-6X7M

Affected Products

Jenkins

Jenkins Dynamic Extended Choice Parameter Plugin

References · 8

• https://jenkins.io/security/advisory/2022-06-22/#SECURITY-2784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34186 · Security Note
• https://osv.dev/vulnerability/GHSA-7558-6q45-6x7m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34186 · Vendor Advisory
• https://github.com/jenkinsci/dynamic-extended-choice-parameter-plugin · Note
• https://t.me/cibsecurity/44994 · Telegram Post
• https://t.me/cvenotify/60450 · Telegram Post
• https://t.me/cvenotify/32414 · Telegram Post