Stored XSS vulnerability in Jenkins Extra Columns Plugin

2022-05-2417:45:44

Google

osv.dev

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. Additionally, a view containing such a job needs to be configured with the build parameters column, or the attacker also needs View/Configure permission.

Jenkins Extra Columns Plugin 1.23 escapes parameter values in the build parameters column.

CPENameOperatorVersion
org.jenkins-ci.plugins:extra-columnseq1.11
org.jenkins-ci.plugins:extra-columnseq1.22
org.jenkins-ci.plugins:extra-columnseq1.13
org.jenkins-ci.plugins:extra-columnseq1.3
org.jenkins-ci.plugins:extra-columnseq1.15
org.jenkins-ci.plugins:extra-columnseq1.14
org.jenkins-ci.plugins:extra-columnseq1.4
org.jenkins-ci.plugins:extra-columnseq1.16
org.jenkins-ci.plugins:extra-columnseq1.17
org.jenkins-ci.plugins:extra-columnseq1.7

Name	Operator	Version
org.jenkins-ci.plugins:extra-columns	eq	1.11
org.jenkins-ci.plugins:extra-columns	eq	1.22
org.jenkins-ci.plugins:extra-columns	eq	1.13
org.jenkins-ci.plugins:extra-columns	eq	1.3
org.jenkins-ci.plugins:extra-columns	eq	1.15
org.jenkins-ci.plugins:extra-columns	eq	1.14
org.jenkins-ci.plugins:extra-columns	eq	1.4
org.jenkins-ci.plugins:extra-columns	eq	1.16
org.jenkins-ci.plugins:extra-columns	eq	1.17
org.jenkins-ci.plugins:extra-columns	eq	1.7