CVE-2017-1000386

Severity Score

5.4

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page through the 'Active Choices Reactive Reference Parameter' type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the 'Build With Parameters' page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.

El plugin Jenkins Active Choices en versiones 1.5.3 y anteriores permitía que usuarios con el permiso Job/Configure proporcionasen HTML arbitrarios para que se mostrase en la página "Build With Parameters" a través del tipo "Active Choices Reactive Reference Parameter". Esto podría incluir, por ejemplo, JavaScript arbitrario. Ahora, Active Choices sanea el HTML insertado en la página "Build With Parameters" solo si el script se ejecuta en un sandbox. Como los scripts que no se ejecutan en sandbox están sujetos a la aprobación del administrador, son estos usuarios los que deciden si permitir o no el envío de scripts problemáticos.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2017-11-29 CVE Reserved
2018-01-26 CVE Published
2023-12-05 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (2)

URL	Tag	Source
http://www.securityfocus.com/bid/101538	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://jenkins.io/security/advisory/2017-10-23	2019-06-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Jenkins Search vendor "Jenkins"		Active Choices Search vendor "Jenkins" for product "Active Choices"				<= 1.5.2 Search vendor "Jenkins" for product "Active Choices" and version " <= 1.5.2"		jenkins		Affected
Jenkins Search vendor "Jenkins"		Active Choices Search vendor "Jenkins" for product "Active Choices"				1.5.3 Search vendor "Jenkins" for product "Active Choices" and version "1.5.3"		-		Affected
Jenkins Search vendor "Jenkins"		Active Choices Search vendor "Jenkins" for product "Active Choices"				1.5.3 Search vendor "Jenkins" for product "Active Choices" and version "1.5.3"		alpha, jenkins		Affected