https://bugzilla.redhat.com/show_bug.cgi?id=1609620
Bug ID: 1609620 Summary: CVE-2018-1999005 jenkins: Cross-site scripting in build timeline widget exploitable by users able to control item display names Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: sfowler@redhat.com CC: ahardin@redhat.com, aos-bugs@redhat.com, bleanhar@redhat.com, bparees@redhat.com, ccoleman@redhat.com, dedgar@redhat.com, java-sig-commits@lists.fedoraproject.org, jgoulding@redhat.com, jokerman@redhat.com, mchappel@redhat.com, mizdebsk@redhat.com, msrb@redhat.com Blocks: 1609611
In Jenkins, the build timeline widget shown on URLs like /view/…/builds did not properly escape display names of items. This resulted in a cross-site scripting vulnerability exploitable by users able to control item display names.
External Reference:
https://jenkins.io/security/advisory/2018-07-18/#SECURITY-944
https://bugzilla.redhat.com/show_bug.cgi?id=1609620
Sam Fowler sfowler@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1609621
--- Comment #1 from Sam Fowler sfowler@redhat.com --- Created jenkins tracking bugs for this issue:
Affects: fedora-all [bug 1609621]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1609621 [Bug 1609621] CVE-2018-1999005 jenkins: Cross-site scripting in build timeline widget exploitable by users able to control item display names [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1609620
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018 |0718,reported=20180730,sour |0718,reported=20180730,sour |ce=oss-security,cvss3=6.4/C |ce=oss-security,cvss3=6.4/C |VSS:3.0/AV:N/AC:L/PR:L/UI:N |VSS:3.0/AV:N/AC:L/PR:L/UI:N |/S:C/C:L/I:L/A:N,cwe=CWE-79 |/S:C/C:L/I:L/A:N,cwe=CWE-79 |,fedora-all/jenkins=affecte |,fedora-all/jenkins=affecte |d,openshift-enterprise-3/je |d,openshift-enterprise-3/je |nkins=new |nkins=affected
https://bugzilla.redhat.com/show_bug.cgi?id=1609620
Jason Shepherd jshepherd@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1610643
java-sig-commits@lists.fedoraproject.org