CVE-2022-36905: Stored XSS vulnerability in Jenkins Maven Metadata Plugin
Summary
CVE-2022-36905: Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin. Affects eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin versions < 2.2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Maven Metadata Plugin is a plugin for the Jenkins CI server that provides functionality related to Maven metadata. It allows users to configure the Repository Base URL for listing Maven artifact versions. This plugin is commonly used in Jenkins CI environments that utilize Maven for build and dependency management.
Vulnerability Detail
The Maven Metadata Plugin for Jenkins CI server Plugin version 2.2 and earlier is vulnerable to a stored cross-site scripting (XSS) attack. The vulnerability arises from the lack of URL validation for the Repository Base URL parameter in the List Maven Artifact Versions configuration. Attackers with Item/Configure permission can exploit this vulnerability by injecting malicious scripts into the Repository Base URL, which will be executed when users access the affected page. This can lead to unauthorized access, data theft, and potential remote code execution.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can manually validate and sanitize the Repository Base URL parameter before configuring it in the List Maven Artifact Versions settings. This can be done by ensuring that the URL follows the expected format and does not contain any suspicious or potentially malicious content.
Conclusion
The Maven Metadata Plugin for Jenkins CI server Plugin version 2.2 and earlier is vulnerable to a stored XSS attack. It is crucial for users to update their installations and apply the recommended fixes to mitigate the risk of unauthorized access, data theft, and potential remote code execution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin →
FAQ
This vulnerability allows attackers to execute arbitrary scripts in the context of the affected Jenkins CI server. Depending on the permissions of the targeted user, this can lead to unauthorized access, data theft, and potential remote code execution.
Users of Jenkins CI server who have the Maven Metadata Plugin version 2.2 or earlier installed are affected by this vulnerability.
At the time of this advisory, there are no known public exploits specifically targeting this vulnerability. However, it is important to promptly apply the recommended fixes to mitigate the risk.
Yes, this vulnerability can be exploited remotely by attackers with Item/Configure permission on the Jenkins CI server.
Yes, the CVSS score for this vulnerability is 8.0, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin.
