Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/08/16 12:00 a.m.•15 views

Stored XSS vulnerability in flaky-test-handler

flaky-test-handler 1.2.2 and earlier does not escape JUnit test contents when showing them on the Jenkins UI. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control JUnit report file contents. flaky-test-handler 1.2.3 escapes JUnit test contents...

8CVSS5.3AI score0.00602EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder