CVE-2023-41931

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2023/09/06/9	Mailing List Third Party Advisory
https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233	Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/09/06/9	Mailing List Third Party Advisory
https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:job_configuration_history:*:*:*:*:*:jenkins:*:*

History

21 Nov 2024, 08:21

Type	Values Removed	Values Added
References	~~() http://www.openwall.com/lists/oss-security/2023/09/06/9 - Mailing List, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2023/09/06/9 - Mailing List, Third Party Advisory
References	~~() https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233 - Vendor Advisory~~	() https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233 - Vendor Advisory

Information

Published : 2023-09-06 13:15

Updated : 2024-11-21 08:21

NVD link : CVE-2023-41931

Mitre link : CVE-2023-41931

CVE.ORG link : CVE-2023-41931

JSON object : View

Products Affected

jenkins

job_configuration_history

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2023-41931", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2023-09-06T13:15:09.577", "references": [{"url": "http://www.openwall.com/lists/oss-security/2023/09/06/9", "tags": ["Mailing List", "Third Party Advisory"], "source": "jenkinsci-cert@googlegroups.com"}, {"url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}, {"url": "http://www.openwall.com/lists/oss-security/2023/09/06/9", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3233", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability."}, {"lang": "es", "value": "El complemento Jenkins Job Configuration History 1227.v7a_79fc4dc01f y versiones anteriores no sanitizan ni escapan el valor timestamp de las entradas de historial al representar una entrada de historial en la vista de historial, lo que da como resultado una vulnerabilidad de Cross-Site Scripting (XSS) almacenada."}], "lastModified": "2024-11-21T08:21:56.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:job_configuration_history:*:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "DCA428E1-B407-4F61-AB8B-B24D902C4A8D", "versionEndIncluding": "1227.v7a_79fc4dc01f"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}