~ / search / GHSA-64mj-3p92-589v

GHSA-64mj-3p92-589v

Cross-site Scripting in Jenkins JUnit Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2022-34176

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:junit < 1119.1121.vc43d0fc45561 1119.1121.vc43d0fc45561

Details

As written in the advisory (Markdown source, shown as plain text).

JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission. JUnit Plugin 1119.1121.vc43d0fc45561 applies the configured markup formatter to descriptions of test results.

References

External links from the advisory. They lead to third-party sites.