Bug 958957 (CVE-2013-2033)

Summary:	CVE-2013-2033 Jenkins: Build Description XSS
Product:	[Other] Security Response	Reporter:	Kurt Seifried <kseifried>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	bleanhar, ccoleman, djorm, dmcphers, jialiu, lmeyer, security-response-team, tkramer
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-02-13 01:15:16 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	958964, 1008793
Bug Blocks:	958963

Description Kurt Seifried 2013-05-02 19:08:26 UTC

Reported by Jesse Glick:

The build description can contain an HTML link directive which will load a 
remote stylesheet. Attackers require the ability to create/modify jobs/builds 
in order to modify the build description.

Comment 2 Vincent Danen 2013-05-02 21:14:40 UTC

This is now public.

External references:

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-05-02
https://issues.jenkins-ci.org/browse/SECURITY-67

Comment 4 David Jorm 2014-02-13 01:15:16 UTC

This issue has been addressed in following products:

  Red Hat OpenShift Enterprise 1.2

Via RHEA-2013:1032 https://rhn.redhat.com/errata/RHEA-2013-1032.html