Cross site scripting

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

CVE-2022-34176

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

CVE-2022-34176

CVE-2022-34176 affects Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier. The issue is a stored cross-site scripting (XSS) vulnerability caused by the plugin not escaping descriptions of test results, enabling exploitation by attackers with Run/Update permission. Public reports show a Medium...

CVE-2022-34176: Improper Neutralization of Input During Web Page Generation

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

CVE-2022-34176

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +230 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (>=1.0, <=1.29)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2022-34176 Source advisory: MEND:CVE-2022-34176...

Stored XSS vulnerability in junit

junit 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission. junit 1119.1121.vc43d0fc45561 applies the configured markup formatter to descriptions of test...

CVE-2022-34176

Jenkins JUnit Plugin 1119.vaa5e9068dad7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Run/Update permission...

MAL-2022-4655 Malicious code in mocha-junit-reporters-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36310669cb81042359b5d17259bddbe5ae2c47e98223446020c5be918f3b39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mocha-junit-reporters-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36310669cb81042359b5d17259bddbe5ae2c47e98223446020c5be918f3b39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2021-21639 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jetbrains.kotlin:kdoc (0.0.2-test-deploy), org.jetbrains.kotlin:kdoc-maven-plugin (0.0.2-test-deploy) +2 more potentially affected by CVE-2020-29582 via org.jetbrains.kotlin:kotlin-stdlib (0.0.2-test-deploy)

org.jetbrains.kotlin:kotlin-stdlib MAVEN version 0.0.2-test-deploy is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-stdlib and may be impacted: - org.jetbrains.kotlin:kdoc 0.0.2-test-deploy -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2020-2223 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2020-2102 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

org.jenkins-ci.main:jenkins-test-harness (1.575), org.jenkins-ci.main:jenkins-war (1.575) +2 more potentially affected by CVE-2020-2101 via org.jenkins-ci.main:jenkins-core (1.575)

org.jenkins-ci.main:jenkins-core MAVEN version 1.575 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.575 - org.jenkins-ci.main:jenkins-war 1.575 -...

io.jenkins.plugins:tricentis-ci (>=1.0, <=1.3), org.jenkins-ci.plugins.workflow:workflow-cps (>=2.37, <=2.38) +3 more potentially affected by CVE-2022-30946 via org.jenkins-ci.plugins:script-security (1.30)

org.jenkins-ci.plugins:script-security MAVEN version 1.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:tricentis-ci =1.0, =2.37, =1.22-beta-1, =1.10, =1.5, =1.6 Source...

new packages: junit

An update is available for junit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

GHSA-X24Q-XWRF-66JM Improper Neutralization of Input During Web Page Generation in Google Web Toolkit

Multiple cross-site scripting XSS vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit GWT before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Improper Neutralization of Input During Web Page Generation in Google Web Toolkit

Multiple cross-site scripting XSS vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit GWT before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...