5.4 Medium

CVE-2023-32984 Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG…

Description

Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins TestNG Results Plugin 730	earliest → 730.v4c5283037693	No fix stated

The 2 CVEs of Jenkins TestNG Results Plugin →

CVE-2022-34778 Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception… Not rated

Do you use Jenkins TestNG Results Plugin?

Track this CVE Watch Jenkins TestNG Results Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-32984

Timeline

Published May 16, 2023
Last modified January 23, 2025

References

Jenkins Security Advisory 2023-05-16 www.jenkins.io

Track this CVE

CVE-2023-32984 Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG…

Description

Affected products and versions

Other CVEs of Jenkins TestNG Results Plugin