Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin

2022-05-2417:23:38

Google

osv.dev

0.001 Low

EPSS

Percentile

22.0%

JSON

Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Agent/Configure permission.

Matrix Project Plugin 1.17 escapes the node names shown in these tooltips.

CPENameOperatorVersion
org.jenkins-ci.plugins:matrix-projecteq1.13
org.jenkins-ci.plugins:matrix-projecteq1.3
org.jenkins-ci.plugins:matrix-projecteq1.15
org.jenkins-ci.plugins:matrix-projecteq1.2.1
org.jenkins-ci.plugins:matrix-projecteq1.7.1
org.jenkins-ci.plugins:matrix-projecteq1.14
org.jenkins-ci.plugins:matrix-projecteq1.4
org.jenkins-ci.plugins:matrix-projecteq1.16
org.jenkins-ci.plugins:matrix-projecteq1.7
org.jenkins-ci.plugins:matrix-projecteq1.12

Name	Operator	Version
org.jenkins-ci.plugins:matrix-project	eq	1.13
org.jenkins-ci.plugins:matrix-project	eq	1.3
org.jenkins-ci.plugins:matrix-project	eq	1.15
org.jenkins-ci.plugins:matrix-project	eq	1.2.1
org.jenkins-ci.plugins:matrix-project	eq	1.7.1
org.jenkins-ci.plugins:matrix-project	eq	1.14
org.jenkins-ci.plugins:matrix-project	eq	1.4
org.jenkins-ci.plugins:matrix-project	eq	1.16
org.jenkins-ci.plugins:matrix-project	eq	1.7
org.jenkins-ci.plugins:matrix-project	eq	1.12