CVE-2018-1000411

2019-01-0923:29:02

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

CPENameOperatorVersion
junit-plugineqjunit-1.15
junit-plugineqjunit-1.22-beta-1
junit-plugineqjunit-1.10
junit-plugineqjunit-1.2-beta-3
junit-plugineqjunit-1.21
junit-plugineqjunit-1.13
junit-plugineqjunit-1.20
junit-plugineqjunit-1.18
junit-plugineqjunit-1.9
junit-plugineqjunit-1.14

Name	Operator	Version
junit-plugin	eq	junit-1.15
junit-plugin	eq	junit-1.22-beta-1
junit-plugin	eq	junit-1.10
junit-plugin	eq	junit-1.2-beta-3
junit-plugin	eq	junit-1.21
junit-plugin	eq	junit-1.13
junit-plugin	eq	junit-1.20
junit-plugin	eq	junit-1.18
junit-plugin	eq	junit-1.9
junit-plugin	eq	junit-1.14