CVE-2018-1000177: Stored XSS vulnerability in Jenkins S3 Publisher Plugin
Summary
CVE-2018-1000177: Stored XSS vulnerability in Jenkins S3 Publisher Plugin. Affects org.jenkins-ci.plugins:s3 versions < 0.11.0. Fixed in 0.11.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins S3 Plugin is a plugin for the Jenkins continuous integration and delivery system that allows users to upload artifacts to Amazon S3. It provides functionality to publish build artifacts to S3 buckets. The plugin is widely used by developers and organizations to store and distribute their build artifacts. However, versions 0.10.12 and older of the plugin are vulnerable to a stored cross-site scripting (XSS) attack.
Vulnerability Detail
The vulnerability exists in the jobMain.jelly file of the S3ArtifactsProjectAction component in the Jenkins S3 Plugin. Attackers who can control the file names of uploaded files can define file names containing JavaScript code. When another user performs certain actions in the Jenkins UI, the JavaScript code will be executed in their browser. This allows the attacker to perform malicious actions on behalf of the user, potentially leading to unauthorized access, data theft, or other harmful consequences.
How To Fix
Minimum fixed version
0.11.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to upgrade to the fixed version of the plugin as soon as possible.
Conclusion
The Jenkins S3 Plugin versions 0.10.12 and older are vulnerable to a stored XSS attack. Users should upgrade to version 0.11.0 or newer to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:s3 →
FAQ
The vulnerability allows attackers to execute arbitrary JavaScript code in the browser of another user. This can lead to unauthorized access, data theft, or other malicious actions.
Users of Jenkins S3 Plugin versions 0.10.12 and older are affected by this vulnerability.
There are no known public exploits for this vulnerability at the time of this report.
Yes, the vulnerability has been fixed in version 0.11.0 of the Jenkins S3 Plugin.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide your pom.xml file, and Vulert will analyze it for open-source vulnerabilities in real-time.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:s3.
