PT-2022-22061 · Unknown+1 · Jenkins Ontrack Jenkins Plugin+2
Published
2022-06-22
·
Updated
2023-11-03
·
CVE-2022-34192
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins ontrack Jenkins Plugin versions 4.0.0 and earlier
Description
The issue is a stored cross-site scripting (XSS) vulnerability that occurs because the plugin does not escape the name of certain parameters on views displaying parameters. This vulnerability is exploitable by attackers with Item/Configure permission. Exploitation requires that parameters are listed on another page and that those pages are not hardened to prevent exploitation. It's noted that Jenkins (core) has prevented exploitation of similar vulnerabilities on certain pages since version 2.44 and LTS 2.32.2.
Recommendations
For Jenkins ontrack Jenkins Plugin versions 4.0.0 and earlier, consider updating to a version that includes the fix for this issue. As a temporary workaround, ensure that pages listing parameters, such as the "Build With Parameters" and "Parameters" pages provided by Jenkins (core), are hardened to prevent exploitation. Restrict access to views displaying parameters to minimize the risk of exploitation. Avoid using the
Ontrack: Multi Parameter choice, Ontrack: Parameter choice, and Ontrack: SingleParameter parameters on views until the issue is resolved.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jenkins
Jenkins Core
Jenkins Ontrack Jenkins Plugin