XSS vulnerability in Jenkins TICS Plugin
Date: 2022-05
Affected: maven/io.jenkins.plugins:tics
Attack vector: xss
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2021-21604
CVE-2021-21605
CVE-2021-21606
CVE-2021-21607
CVE-2021-21609
CVE-2021-21613
CWE: CWE-20
CWE-22
CWE-502
CWE-770
CWE-79
CWE-863
CVSS: 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses. This results in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control TICS service response content. Jenkins TICS Plugin 2020.3.0.7 escapes TICS service responses, or strips HTML out, as appropriate.


Mitigations:

Architectural layers (MAESTRO):