GHSA-rp4x-h577-chvq

Stored XSS vulnerability in Jenkins Active Choices Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-21699

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.biouno:uno-choice	< 2.5.7	2.5.7

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. Jenkins Active Choices Plugin 2.5.7 escapes references to parameter names.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-21699 advisory
https://github.com/jenkinsci/active-choices-plugin/commit/4529ab6413d4ec70d02455536ea6c5196332ba62 web
https://github.com/jenkinsci/active-choices-plugin package
https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2219 web
http://www.openwall.com/lists/oss-security/2021/11/12/1 web