CVE-2022-34788: Jenkins Matrix Reloaded Plugin Stored XSS
Summary
CVE-2022-34788: Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS. Affects net.praqma:matrix-reloaded versions < 1.1.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Matrix Reloaded Plugin is a Maven package (net.praqma:matrix-reloaded) that provides functionality for managing agents in a Jenkins environment. It allows users to configure and control agents for executing tasks. The plugin is vulnerable to a stored cross-site scripting (XSS) attack due to improper handling of agent names in tooltips. This vulnerability can be exploited by attackers with Agent/Configure permission.
Vulnerability Detail
The Jenkins Matrix Reloaded Plugin version 1.1.3 and earlier does not properly escape the agent name in tooltips, leading to a stored XSS vulnerability. An attacker with Agent/Configure permission can inject malicious scripts into the agent name, which will be executed when the tooltip is rendered. This can result in the execution of arbitrary code in the context of the user viewing the tooltip. The impact of this vulnerability can range from stealing sensitive information to performing actions on behalf of the user.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable tooltips in the Jenkins Matrix Reloaded Plugin configuration. This can be done by modifying the plugin settings to remove or disable the tooltip feature. However, this workaround may limit the usability and functionality of the plugin.
Conclusion
The Jenkins Matrix Reloaded Plugin is vulnerable to a stored XSS attack due to improper handling of agent names in tooltips. This can allow attackers to execute arbitrary code in the context of the user viewing the tooltip. It is recommended to upgrade to the latest version of the plugin (1.1.4) to fix this vulnerability. Users can also disable tooltips as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for net.praqma:matrix-reloaded →
FAQ
This vulnerability allows an attacker to execute arbitrary code in the context of the user viewing the tooltip. The impact can range from stealing sensitive information to performing actions on behalf of the user.
Attackers with Agent/Configure permission in the Jenkins environment can exploit this vulnerability.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Yes, a fix is available in the latest version of the Jenkins Matrix Reloaded Plugin (1.1.4). Users should update their installation to include the fixed version of the plugin.
As a temporary workaround, users can disable tooltips in the Jenkins Matrix Reloaded Plugin configuration. However, this may limit the usability and functionality of the plugin.
Related vulnerabilities
Recent vulnerabilities recorded for net.praqma:matrix-reloaded.
