~ / search / GHSA-q787-qgw2-j2qf

GHSA-q787-qgw2-j2qf

Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-28159

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:selected-tests-executor <= 1.3.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

References

External links from the advisory. They lead to third-party sites.