medium5.4
CVE-2021-21699
Stored XSS vulnerability in Jenkins Active Choices Plugin
Impact
Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. Jenkins Active Choices Plugin 2.5.7 escapes references to parameter names.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.biouno:uno-choice | <= 2.5.6 | 2.5.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Active Choices | through 2.5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.openwall.com/lists/oss-security/2021/11/12/1
- https://www.jenkins.io/security/advisory/2021-11-12/#SECURITY-2219
- https://github.com/advisories/GHSA-rp4x-h577-chvq
- https://nvd.nist.gov/vuln/detail/CVE-2021-21699
- https://github.com/jenkinsci/active-choices-plugin/commit/4529ab6413d4ec70d02455536ea6c5196332ba62