Stored XSS vulnerability in selected-tests-executor

selected-tests-executor 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. As of publication of this advisory, there is no fix...

PT-2022-18858 · Jenkins · Jenkins Tests Selector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Tests Selector Plugin versions 1.3.3 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the Properties File Path option for Choosing Tests parameters is not properly...