CVE-2020-2224: XSS
A flaw was found in the Matrix Project Plugin version 1.16 and prior. Node names shown in tooltips are not escaped on the overview page of builds with a single axis which could lead to a stored cross-site scripting (XSS) vulnerability. The user must have the Agent/Configure permission for this exploit to function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Other sources
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability.
Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Agent/Configure permission.
Matrix Project Plugin 1.17 escapes the node names shown in these tooltips.
Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Agent/Configure permission.
References:
https://www.jenkins.io/security/advisory/2020-07-15/
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-2224?
CVE-2020-2224 is a vulnerability in the Jenkins Matrix Project Plugin version 1.16 and earlier that could lead to a stored cross-site scripting (XSS) attack.
How severe is CVE-2020-2224?
CVE-2020-2224 has a severity rating of 8 (high).
Which software versions are affected by CVE-2020-2224?
The affected software versions are Jenkins Matrix Project Plugin 1.16 and earlier.
How can I fix CVE-2020-2224?
To fix CVE-2020-2224, update to Jenkins Matrix Project Plugin version 1.17 or later.
Where can I find more information about CVE-2020-2224?
You can find more information about CVE-2020-2224 in the Jenkins Security Advisory (https://www.jenkins.io/security/advisory/2020-07-15/) and the Red Hat Security Advisory (https://access.redhat.com/errata/RHSA-2020:3453).