Stored XSS vulnerability in Jenkins Active Choices Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2289 · ADVISORY
• jenkinsci/active-choices-plugin commit 59bbd4a · WEB
• jenkinsci/active-choices-plugin · PACKAGE
• jenkins.io/security/advisory/2020-10-08 · WEB
• openwall.com/lists/oss-security/2020/10/08/5 · WEB

Lỗ hổng khác của org.biouno:uno-choice

• CVE-2021-21699TRUNG BÌNH 5.4Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, …
• CVE-2021-21616TRUNG BÌNH 4.6Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS)…
• CVE-2020-2290TRUNG BÌNH 5.4Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, res…
• CVE-2017-1000386TRUNG BÌNH 5.4Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on…