CVE-2020-2231

🗓️ 12 Aug 2020 13:25:22Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 175 Views🌐 WEB

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token

Reporter	Title	Published	Views	Family All 35
Cvelist	CVE-2020-2231	12 Aug 202013:25	–	cvelist
Exploit DB	Jenkins 2.235.3 - 'X-Forwarded-For' Stored XSS	14 Dec 202000:00	–	exploitdb
FreeBSD	jenkins -- multiple vulnerabilities	12 Aug 202000:00	–	freebsd
EUVD	EUVD-2022-4412	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : jenkins -- multiple vulnerabilities (eef0d2d9-78c0-441e-8b03-454c5baebe20)	13 Aug 202000:00	–	nessus
Tenable Nessus	Jenkins < 2.235.4 LTS / 2.252 Multiple Cross-Site Scripting (XSS) Vulnerabilities	20 Aug 202000:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)	23 Sep 202000:00	–	nessus
Tenable Nessus	RHEL 7 : OpenShift Container Platform 4.5.13 jenkins (RHSA-2020:3841)	2 Oct 202000:00	–	nessus
Tenable Nessus	RHEL 7 : OpenShift Container Platform 3.11.306 jenkins (RHSA-2020:4223)	22 Oct 202000:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.3.38 jenkins and openshift (RHSA-2020:3808)	6 May 202600:00	–	nessus

NVD

Node

jenkins jenkinsRange≤2.235.3lts

jenkins jenkinsRange≤2.251-

[
  {
    "product": "Jenkins",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "2.251",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "LTS 2.235.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2020-08-12/
openwall	www.openwall.com/lists/oss-security/2020/08/12/4
packetstormsecurity	www.packetstormsecurity.com/files/160616/Jenkins-2.251-LTS-2.235.3-Cross-Site-Scripting.html

Parameter	Position	Path	Description	CWE
token	header	/job/<project_name>/build	Stored XSS via unescaped remote IP in build trigger when using Trigger builds remotely (X-Forwarded-For header used to override client IP).	CWE-79
X-Forwarded-For	header	/job/<project_name>/build	Stored XSS via unescaped remote IP in build trigger when using Trigger builds remotely (X-Forwarded-For header used to override client IP).	CWE-79

21 Nov 2024 05:25Current

5.1Medium risk

Vulners AI Score5.1

CVSS 23.5

CVSS 3.15.4

EPSS0.00472

CWE-79