Aller au contenu
Se connecter
Non notée

CVE-2022-34176 Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a…

Description

Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins JUnit Plugin 1.53 premières → < 1.53.0.1 1.53.0.1

Autres CVE de Jenkins JUnit Plugin

Les 3 CVE de Jenkins JUnit Plugin →
CVE-2023-25761 Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions,… 5.4 Moyenne CVE-2022-45380 Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in… 5.4 Moyenne
Suivre cette CVE