Skip to content
Sign in
Not rated

CVE-2022-28159 Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests…

Description

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins Tests Selector Plugin 1.3 earliest → 1.3.3 No fix stated

Other CVEs of Jenkins Tests Selector Plugin

The 2 CVEs of Jenkins Tests Selector Plugin →
CVE-2022-28160 Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on… Not rated
Track this CVE