Patchfirst
Patchfirst
CVE-2021-21616 EPSS 76.2%

Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Jenkins project · Jenkins Active Choices Plugin

Summary

The Jenkins Active Choices Plugin, version 2.5.2 and earlier, fails to escape reference parameter values, which creates a stored cross-site scripting flaw. An attacker holding Job/Configure permission can exploit it to store malicious script that runs in other users' browsers.

Heading is the official description · CVE.org
Breakdown
19.9 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 24 Feb 2021. No public exploit code or confirmed exploitation is recorded.

5 fixes in uno-choice over 4 years. The latest fix listed for uno-choice is 2.5.7.

Fixes in uno-choiceMaven package, by fixed version. Earlier and later fixes in the same package, not necessarily the same bug.

  1. 2.0CVE-2017-100038626 Jan 2018
  2. 2.5CVE-2020-22898 Oct 2020
  3. 2.5CVE-2020-22908 Oct 2020
  4. 2.5.3CVE-2021-2161624 Feb 2021
  5. 2.5.7CVE-2021-2169912 Nov 2021Latest listed

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

Am I affected? What do I upgrade to?

From GitHub Security Advisories and OSV

1 package in 1 ecosystem. Main package: org.biouno:uno-choice.

Mavenorg.biouno:uno-choiceGHSA-4f6x-g5vh-8jm5

Upgrade to 2.5.7 or later

Fixes this CVE and 1 other known vulnerability in this package (CVE-2021-21699).

Set the version to 2.5.7 or later in your pom.xml or build.gradle.

First fixed in 2.5.3 for CVE-2021-21616.

Affected versions

If you runUpgrade to
All versions before 2.5.32.5.7first fix for this CVE: 2.5.3

“Up to” means the second version is the fix and is not affected.

Check your lockfile against all CVEs

What security researchers reported

Not named in any threat report yet

References

2 links, grouped by NVD tag

x_refsource_CONFIRM 1

jenkins.io/security/advisory/2021-02-24/#SECURITY-2192

mailing-list 1

openwall.com/lists/oss-security/2021/02/24/3
↑ ↓ chooseEnter openEsc close