CVE-2022-34778

2022-06-3017:45:59

jenkins

www.cve.org

cve-2022-34778

jenkins testng results plugin

xss vulnerability

cross-site scripting

attackers

job-level options

test results control

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or control test results.

CNA Affected

[
  {
    "product": "Jenkins TestNG Results Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "554.va4a552116332",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]