CVE-2020-2205: Stored XSS vulnerability in Jenkins VncRecorder Plugin
Summary
CVE-2020-2205: Stored XSS vulnerability in Jenkins VncRecorder Plugin. Affects org.jenkins-ci.plugins:vncrecorder versions < 1.35. Fixed in 1.35. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins VncRecorder Plugin is a tool used for recording and replaying VNC sessions in Jenkins. It allows administrators to configure VNC servers and record their sessions for later playback. The plugin is an integral part of Jenkins and is widely used in various industries for automation and continuous integration purposes.
Vulnerability Detail
The VncRecorder Plugin version 1.25 and earlier is vulnerable to a stored cross-site scripting (XSS) attack. The issue arises due to the lack of proper escaping of a tool path in the checkVncServ form validation endpoint. This vulnerability can be exploited by Jenkins administrators, allowing an attacker to inject malicious scripts into the application. If successfully exploited, an attacker could execute arbitrary code in the context of the affected user's browser, potentially leading to unauthorized access, data theft, or further compromise of the Jenkins environment. The vulnerability has a CVSS score of 4.8, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.35
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the VncRecorder Plugin to the latest version to ensure the security of the Jenkins environment.
Conclusion
The VncRecorder Plugin in Jenkins versions 1.25 and earlier is vulnerable to a stored XSS attack. To mitigate this vulnerability, it is crucial to update the plugin to version 1.35 or later. Failure to do so may result in unauthorized access, data theft, or compromise of the Jenkins environment. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:vncrecorder →
FAQ
The vulnerability allows an attacker to execute arbitrary code in the context of the affected user's browser. This can lead to unauthorized access, data theft, or further compromise of the Jenkins environment.
Jenkins installations using VncRecorder Plugin versions 1.25 and earlier are affected by this vulnerability.
There is no known public exploit for this vulnerability at the time of this report. However, it is essential to update the plugin to the latest version to prevent potential exploitation.
The only effective mitigation is to update the VncRecorder Plugin to version 1.35 or later. This will address the vulnerability by implementing proper escaping of the tool path.
Yes, the CVSS score for this vulnerability is 4.8, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:vncrecorder.
