com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.1.2, <=1.4.1), com.mentor.questa.vrm.jenkins:mentor-questa-vrm (>=1.1, <=1.2) +31 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.6)

org.jenkins-ci.plugins:junit MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - com.groupon.jenkins.plugins:dotci-plugins-starter-pack =1.1.2, =1.1, =1.13.2, =1.0.0, =2.11, =2.28,...

org.jenkins-ci.plugins:test-results-aggregator (>=1.0.0, <=1.1.7), org.jvnet.hudson.plugins:instant-messaging (>=1.37, <=1.39) +1 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.7)

org.jenkins-ci.plugins:junit MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:test-results-aggregator =1.0.0, =1.37, =2.31, =2.33 Source cves: CVE-2022-34176...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.4.2, <=1.7.1) +3 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.8)

org.jenkins-ci.plugins:junit MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack =1.7.2, =1.4.2, =2.0, =2.0.1, =2.2.13, =2.2.17...

org.jenkins-ci.plugins:junit-realtime-test-reporter (0.6), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.5.3) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.24)

org.jenkins-ci.plugins:junit MAVEN version 1.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:junit-realtime-test-reporter 0.6 - org.jenkins-ci.plugins:templating-engine =1.6,...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.29)

org.jenkins-ci.plugins:junit MAVEN version 1.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0 Source cves: CVE-2022-34176 Source advisory:...

org.jenkins-ci.main:jenkins-test-harness (>=1.577, <=1.586), org.jenkins-ci.plugins:bitbucket-build-status-notifier (>=1.2.1, <=1.4.2) +4 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.0)

org.jenkins-ci.plugins:junit MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.main:jenkins-test-harness =1.577, =1.2.1, =1.21, =1.5.0, =0.7.1, =0.7.3 Source cves:...

org.jenkins-ci.plugins:parallel-test-executor (1.6-beta-2) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.2-beta-2)

org.jenkins-ci.plugins:junit MAVEN version 1.2-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:parallel-test-executor 1.6-beta-2 Source cves: CVE-2022-34176 Source...

org.jenkins-ci.main:jenkins-test-harness (>=1.587, <=1.589), org.jenkins-ci.plugins:cucumber-testresult-plugin (>=0.8-beta1, <=0.9.7) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.2-beta-3)

org.jenkins-ci.plugins:junit MAVEN version 1.2-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.main:jenkins-test-harness =1.587, =0.8-beta1, =0.9.7 Source cves: CVE-2022-34176...

de.tsystems.mms.apm:performance-signature-dynatrace (>=2.0.0, <=2.5.8.1), de.tsystems.mms.apm:performance-signature-ui (>=2.2.0, <=2.5.8.1) +5 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.2-beta-4)

org.jenkins-ci.plugins:junit MAVEN version 1.2-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - de.tsystems.mms.apm:performance-signature-dynatrace =2.0.0, =2.2.0, =2.2.2, =0.34, =1.590, =1.3,...

org.jenkins-ci.plugins:extra-columns (>=1.17, <=1.23), org.jenkins-ci.plugins:hpe-network-virtualization (1.0) +4 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.11)

org.jenkins-ci.plugins:junit MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:extra-columns =1.17, =1.29, =3.12, =3.14 Source cves: CVE-2022-34176 Source...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), de.esailors.jenkins:test-stability (2.3) +2 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.14)

org.jenkins-ci.plugins:junit MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =1.4, =1.5 - org.jenkins-ci.plugins:nunit 0.18 Source cves:...

org.jenkins-ci.plugins:cisco-spark (>=1.1.0, <=1.1.1), org.jenkins-ci.plugins:meliora-testlab (1.16) +1 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.15)

org.jenkins-ci.plugins:junit MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:cisco-spark =1.1.0, =1.1.1 - org.jenkins-ci.plugins:meliora-testlab 1.16 -...

org.jenkins-ci.plugins:ivy (>=1.27, <=2.2), org.jenkins-ci.plugins:mattermost (>=2.1.3, <=2.7.1) +1 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.18)

org.jenkins-ci.plugins:junit MAVEN version 1.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:ivy =1.27, =2.1.3, =2.7.1 - org.jenkins-ci.plugins:mock-load-builder 1.1 Source...

com.mentor.questa.vrm.jenkins:mentor-questa-vrm (>=1.4, <=1.15), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +21 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.19)

org.jenkins-ci.plugins:junit MAVEN version 1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - com.mentor.questa.vrm.jenkins:mentor-questa-vrm =1.4, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

org.jenkins-ci.plugins:whitesource (>=20.1.2, <=21.1.2) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.28)

org.jenkins-ci.plugins:junit MAVEN version 1.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:whitesource =20.1.2, =21.1.2 Source cves: CVE-2022-34176 Source advisory:...

Cross-site Scripting in Jenkins JUnit Plugin

JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission. JUnit Plugin 1119.1121.vc43d0fc45561 applies the configured markup formatter to descriptio...

org.jenkins-ci.plugins:junit-realtime-test-reporter (>=0.3, <=0.4) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.13)

org.jenkins-ci.plugins:junit MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:junit-realtime-test-reporter =0.3, =0.4 Source cves: CVE-2022-34176 Source...

Jenkins JUnit Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins JUnit Plugin 1119.vaa5e9068dad7...

CVE-2022-34176

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

CVE-2022-34176

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...