GHSA-vr6v-wjfw-rxcr
Stored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:matrix-auth | < 2.6.2 | 2.6.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the permission table. This results in a stored cross-site scripting (XSS) vulnerability. When using project-based matrix authorization, this vulnerability can be exploited by a user with Job/Configure or Agent/Configure permission, otherwise by users with Overall/Administer permission.
Matrix Authorization Strategy Plugin 2.6.2 escapes user names in the permission table.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2020-2226
- https://github.com/jenkinsci/matrix-auth-plugin/commit/e263a2feb47594787952a7e0bd1550e849c58b07
- https://github.com/jenkinsci/matrix-auth-plugin
- https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1909
- http://www.openwall.com/lists/oss-security/2020/07/15/5