Information Exposure

Overview junit:junit is an unit testing framework for Java Affected versions of this package are vulnerable to Information Exposure. The JUnit4 test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between...

CVE-2020-12642

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

CVE-2020-12642

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

Server side request forgery (ssrf)

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

CVE-2020-12642

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

CVE-2020-12642

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

CVE-2020-12642: Improper Restriction of XML External Entity Reference

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import...

PT-2020-13180

Name of the Vulnerable Software and Affected Versions service-api versions 3.1.0 through 4.3.11 service-api versions 5.0.0 through 5.1.0 Description An issue in service-api allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import. This is due to the XML parser not being...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

CloudBees Jenkins JUnit Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the U.S. CloudBees set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . JUnit Plugin is used in one of the Java...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

Cross site request forgery (csrf)

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.6), br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1) +229 more potentially affected by CVE-2018-1000411 via org.jenkins-ci.plugins:junit (>=1.0, <=1.24)

org.jenkins-ci.plugins:junit MAVEN version =1.0, =1.0.5.0, =0.2, =1.9.2-beta, =1.28.0, =2.37.0, =1.7.2, =1.1.2, =1.2.5, =1.1, =1.0.22, =2.2, =2.20 and more Source cves: CVE-2018-1000411 Source advisory: MEND:CVE-2018-1000411...

CVE-2018-1000411

The provided connected documents confirm CVE-2018-1000411 is a CSRF vulnerability in Jenkins JUnit Plugin (versions up to 1.25) affecting TestObject.java, allowing an attacker to set the description of a test result. The vulnerability description is consistent across sources (NVD, Red Hat, GHSA, ...

CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

CVE-2018-1000411: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result...

PT-2019-8722

Name of the Vulnerable Software and Affected Versions Jenkins JUnit Plugin versions 1.25 and earlier Description A cross-site request forgery issue exists in the TestObject.java file, allowing unauthorized modification of test result descriptions. Recommendations For Jenkins JUnit Plugin versions...

com.github.hqstevenson.junit:sftp-junit (0.2.0), com.github.oscerd:camel-cassandra (2.21.0) +670 more potentially affected by CVE-2018-8027 via org.apache.camel:camel-core (2.21.0)

org.apache.camel:camel-core MAVEN version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.hqstevenson.junit:sftp-junit 0.2.0 - com.github.oscerd:camel-cassandra 2.21.0 -...