CVE-2020-2217: Reflected XSS in Jenkins Compatibility Action Storage Plugin
Summary
CVE-2020-2217: Reflected XSS in Jenkins Compatibility Action Storage Plugin. Affects org.jenkins-ci.plugins:compatibility-action-storage versions < 1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Compatibility Action Storage Plugin is a Maven package (org.jenkins-ci.plugins:compatibility-action-storage) that provides functionality for storing compatibility actions in Jenkins. It allows users to test connections and store the results in a MongoDB database. This plugin is vulnerable to a reflected cross-site scripting (XSS) attack.
Vulnerability Detail
The vulnerability (CVE-2020-2217) arises from the plugin's failure to properly escape content retrieved from the MongoDB in the testConnection form validation endpoint. As a result, an attacker can inject malicious scripts that will be executed in the context of the victim's browser. This can lead to various consequences, such as session hijacking, data theft, or unauthorized actions on behalf of the victim.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If upgrading to a patched version is not immediately feasible, a temporary workaround is to disable or restrict access to the testConnection form validation endpoint. This can be achieved by modifying the Jenkins configuration or using access control mechanisms to limit access to the vulnerable endpoint.
Conclusion
The Jenkins Compatibility Action Storage Plugin is vulnerable to a reflected XSS attack due to improper content escaping. Users are advised to upgrade to a non-vulnerable version (1.1 or later) or apply the recommended workaround. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.plugins:compatibility-action-storage →
FAQ
The vulnerability allows an attacker to execute arbitrary scripts in the victim's browser, potentially leading to session hijacking, data theft, or unauthorized actions.
At the time of this advisory, there are no known public exploits specifically targeting this vulnerability. However, it is important to promptly apply the recommended fixes to mitigate the risk.
No, only versions 1.0 and earlier are affected. The vulnerability has been addressed in version 1.1 and later.
Yes, this vulnerability can be exploited remotely. An attacker can craft a malicious URL or a specially crafted request to trigger the XSS vulnerability.
Yes, the CVSS score for this vulnerability is 6.1, indicating a moderate severity level.
