Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting

2023-04-0221:30:17

Google

osv.dev

jenkins

mashup portlets

plugin

cross-site scripting

xss

vulnerability

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

32.4%

JSON

Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the “Generic JS Portlet” feature that lets a user populate a portlet using a custom JavaScript expression.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.

CPENameOperatorVersion
javagh.jenkins:mashup-portlets-plugineq1.0.0
javagh.jenkins:mashup-portlets-plugineq1.0.3
javagh.jenkins:mashup-portlets-plugineq0.9
javagh.jenkins:mashup-portlets-plugineq0.9.1
javagh.jenkins:mashup-portlets-plugineq1.0.4
javagh.jenkins:mashup-portlets-plugineq1.0.5
javagh.jenkins:mashup-portlets-plugineq1.0.6
javagh.jenkins:mashup-portlets-plugineq1.0.7
javagh.jenkins:mashup-portlets-plugineq1.0.9
javagh.jenkins:mashup-portlets-plugineq1.0.8

Name	Operator	Version
javagh.jenkins:mashup-portlets-plugin	eq	1.0.0
javagh.jenkins:mashup-portlets-plugin	eq	1.0.3
javagh.jenkins:mashup-portlets-plugin	eq	0.9
javagh.jenkins:mashup-portlets-plugin	eq	0.9.1
javagh.jenkins:mashup-portlets-plugin	eq	1.0.4
javagh.jenkins:mashup-portlets-plugin	eq	1.0.5
javagh.jenkins:mashup-portlets-plugin	eq	1.0.6
javagh.jenkins:mashup-portlets-plugin	eq	1.0.7
javagh.jenkins:mashup-portlets-plugin	eq	1.0.9
javagh.jenkins:mashup-portlets-plugin	eq	1.0.8