Stored XSS vulnerability in Jenkins Active Choices Plugin

2022-05-2417:30:18

Google

osv.dev

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Active Choices Plugin 2.4 and earlier does not escape List and Map return values of sandboxed scripts for Reactive Reference Parameters.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

This issue is caused by an incomplete fix for SECURITY-470.

Active Choices Plugin 2.5 escapes all legal return values of sandboxed scripts.

CPENameOperatorVersion
org.biouno:uno-choiceeq2.2
org.biouno:uno-choiceeq1.5.1
org.biouno:uno-choiceeq2.4
org.biouno:uno-choiceeq2.1
org.biouno:uno-choiceeq1.3
org.biouno:uno-choiceeq1.1
org.biouno:uno-choiceeq1.5.0
org.biouno:uno-choiceeq2.2.1
org.biouno:uno-choiceeq2.0
org.biouno:uno-choiceeq1.0

Name	Operator	Version
org.biouno:uno-choice	eq	2.2
org.biouno:uno-choice	eq	1.5.1
org.biouno:uno-choice	eq	2.4
org.biouno:uno-choice	eq	2.1
org.biouno:uno-choice	eq	1.3
org.biouno:uno-choice	eq	1.1
org.biouno:uno-choice	eq	1.5.0
org.biouno:uno-choice	eq	2.2.1
org.biouno:uno-choice	eq	2.0
org.biouno:uno-choice	eq	1.0