PT-2022-4040 · Jenkins · Jenkins Dynamic Extended Choice Parameter Plugin+1

Published 2022-07-27 · Updated 2023-11-02 · CVE-2022-36902

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier

Description The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting (XSS) attack. This stored XSS vulnerability can be exploited by attackers with Item/Configure permission, as several fields of Moded Extended Choice parameters are not properly escaped.

Recommendations For Jenkins Dynamic Extended Choice Parameter Plugin versions 1.0.1 and earlier, update to a version that properly escapes fields of Moded Extended Choice parameters to prevent stored XSS attacks. As a temporary workaround, consider restricting access to the Item/Configure permission to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2022-04873

CVE-2022-36902

GHSA-JVVX-HMMR-RHGG

Affected Products

Jenkins

Jenkins Dynamic Extended Choice Parameter Plugin

References · 8

• https://jenkins.io/security/advisory/2022-07-27/#SECURITY-2682 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jvvx-hmmr-rhgg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36902 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36902 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04873 · Security Note
• https://github.com/jenkinsci/dynamic-extended-choice-parameter-plugin · Note
• https://t.me/cibsecurity/47072 · Telegram Post
• http://openwall.com/lists/oss-security/2022/07/27/1 · Note