CVE-2023-40342

CVE-2023-40342 affects the Jenkins Flaky Test Handler Plugin (versions 1.2.2 and earlier). The vulnerability arises because the plugin does not escape JUnit test contents when displaying results in the Jenkins UI, leading to a stored cross-site scripting (XSS) flaw that can be triggered by an att...

CVE-2022-28140

CVE-2022-28140 affects Jenkins Flaky Test Handler Plugin, version 1.2.1 and earlier. The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks. Per CNVD/GHSA, this XXE issue can enable an attacker to extract secrets from the Jenkins controller (...

CVE-2020-2237

The CVE-2020-2237 entry pertains to a CSRF vulnerability in Jenkins Flaky Test Handler Plugin (versions 1.0.4 and earlier). The flaw allows an attacker to trigger a rebuild of a project at a previous git revision via the plugin's Deflake this build feature due to insufficient request validation. ...