GHSA-jmxr-w2jc-qp7wHighCVSS 8.0

Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL

Published
April 13, 2022
Last Modified
July 21, 2023

🔗 CVE IDs covered (1)

CVE-2022-29049 →

📋 Description

Jenkins promoted builds Plugin provides dedicated support for defining promotions using Job DSL Plugin.

promoted builds Plugin 873.v6149db_d64130 and earlier does not validate the names of promotions defined in Job DSL. This allows attackers with Job/Configure permission to create a promotion with an unsafe name. As a result, the promotion name could be used for cross-site scripting (XSS) or to replace other config.xml files.

promoted builds Plugin 876.v99d29788b_36b_ and 3.10.1 validates the name of promotions.

🎯 Affected products2

  • maven/org.jenkins-ci.plugins:promoted-builds:< 3.10.1
  • maven/org.jenkins-ci.plugins:promoted-builds:>= 3.11, < 876.v99d29788b

🔗 References (4)