Jenkins Project Jenkins Junit Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_junit_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2023-25761MEDIUMCVSS 5.4≥ unspecified, ≤ 1166.va_436e268e9722023-02-15
CVE-2023-25761 [MEDIUM] CWE-79 CVE-2023-25761: Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaSc
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.
cvelistv5nvd
CVE-2022-45380MEDIUMCVSS 5.4≥ unspecified, ≤ 1159.v0b_396e1e07dd2022-11-15
CVE-2022-45380 [MEDIUM] CWE-79 CVE-2022-45380: Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to
Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
cvelistv5nvd
CVE-2022-34176MEDIUMCVSS 5.4≥ unspecified, ≤ 1119.va_a_5e9068da_d72022-06-23
CVE-2022-34176 [MEDIUM] CWE-79 CVE-2022-34176: Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results,
Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.
cvelistv5nvd