5.4 Moyenne

CVE-2023-32984 Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG…

Description

Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins TestNG Results Plugin 730	premières → 730.v4c5283037693	Pas de correctif indiqué

Les 2 CVE de Jenkins TestNG Results Plugin →

CVE-2022-34778 Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception… Non notée

Vous utilisez Jenkins TestNG Results Plugin ?

Suivre cette CVE Surveiller Jenkins TestNG Results Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2023-32984

Chronologie

Publiée 16 mai 2023
Dernière modification 23 janvier 2025

Références

Jenkins Security Advisory 2023-05-16 www.jenkins.io

Suivre cette CVE

CVE-2023-32984 Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG…

Description

Produits et versions touchés

Autres CVE de Jenkins TestNG Results Plugin