testng-team__testng_CVE-2022-4065_7-5

TestNG의 메인 웹사이트에서 문서를 확인할 수 있습니다. 릴리스 노트 7.4.0 7.3.0 7.1.0 7.0.0 도움이 필요하신가요? 새 이슈를 열기 전에 다음 곳에 질문을 올리셨나요? Google 그룹 StackOverflow 두 사이트 모두에 게시하셨다면, 답변이 중복되지 않도록 다른 질문의 링크를 제공해 주세요. 정말 TestNG 버그인가요? 이슈를 게시하기 전에 셸 창에서 문제를 재현해 보세요. 셸에서 문제가 발생하지 않는다면, 먼저 러너의 버그트래커에 해당 이슈가 있는지 확인하고, 해당 사이트에 먼저 이슈를 열어...

EUVD-2023-1550

Malicious code in bioql PyPI...

EUVD-2022-7421

Malicious code in bioql PyPI...

TencentOS Server 4: testng (TSSA-2025:0122)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0122 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2023-32984

Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide a crafted...

CVE-2022-34778

Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs or contro...

openSUSE Security Advisory (SUSE-SU-2024:2568-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: mockito / mockito-javadoc / snakeyaml / snakeyaml-javadoc / testng / etc (SUSE-SU-2024:2568-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2568-1 advisory. mockito was updated to version 5.11.0: - Added bundle manifest to the mockito-core artifact - Mockito 5 i...

SUSE-SU-2024:2568-1 Security update for mockito, snakeyaml, testng

This update for mockito, snakeyaml, testng fixes the following issues: mockito was updated to version 5.11.0: - Added bundle manifest to the mockito-core artifact - Mockito 5 is making core changes to ensure compatibility with future JDK versions. - Switch the Default MockMaker to mockito-inline...

SUSE: Security Advisory (SUSE-SU-2024:2568-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:12533-1 testng-7.4.0-3.1 on GA media

These are all security issues fixed in the testng-7.4.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12107-1 testng-7.4.0-2.1 on GA media

These are all security issues fixed in the testng-7.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : testng (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - testng: a path traversal in zip files CVE-2022-4065 Note that Nessus has not tested for this issue but has instead...

Security Bulletin: Vulnerabilities of JCommander and TestNG have affected APM WebLogic and APM JBoss Agents.

Summary APM WebLogic and APM JBoss agents are vulnerable to JCommander and TestNG as described in 221124, CVE-2022-4065. The fix includes removing the required libraries from the installed path Vulnerability Details CVEID:CVE-2022-4065 DESCRIPTION: cbeust testing could allow a remote authenticate...

The vulnerability of the `testngXmlExistsInJar` function (testng-core/src/main/java/org/testng/JarFileUtils.java) in the TestNG testing framework allows a attacker to execute arbitrary code.

The vulnerability of the testngXmlExistsInJar function testng-core/src/main/java/org/testng/JarFileUtils.java in the TestNG testing framework is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating...

Fedora: Security Advisory for testing (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: testng-7.8.0-5.fc40

TestNG is a testing framework inspired from JUnit and NUnit but introducing some new functionality, including flexible test configuration, and distributed test running. It is designed to cover unit tests as well as functional, end-to-end, integration, etc...

[SECURITY] Fedora 40 Update: opentest4j-1.3.0-6.fc40

Open Test Alliance for the JVM is a minimal common foundation for testing libraries on the JVM. The primary goal of the project is to enable testing frameworks like JUnit, TestNG, Spock, etc. and third-party assertion libraries like Hamcrest, AssertJ, etc. to use a common set of exceptions that...

[SECURITY] Fedora 40 Update: assertj-core-3.24.2-8.fc40

A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG...

Jenkins plugins Multiple Vulnerabilities (2022-06-30)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulti...