HTTP: Jenkins Repository Connector Plugin Stored Cross-Site Scripting

This signature detects attempts to exploit a known cross-site scripting vulnerability against Jenkins Repository Connector Plugin. It is due to insufficient validation of user-supplied input. Attackers can steal cookie-based authentication credentials and launch other attacks.

Extended Description

Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected Products

Jenkins repository_connector

References

CVE: CVE-2022-29036

URL: https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183 https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2231 https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2168 https://www.jenkins.io/security/advisory/2021-05-11/ https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2192 https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2219 https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2617

Short Name

HTTP:XSS:JENKINS-REP-CON-SXSS

Severity

Warning

Recommended

False

Recommended Action

Drop

HTTP: Jenkins Repository Connector Plugin Stored Cross-Site Scripting

Extended Description

Affected Products

References

Found a potential security threat?