CVE-2022-45380

CVE-2022-45380 affects Jenkins JUnit Plugin (1159.v0b_396e1e07dd and earlier). The issue: test report output URLs are converted to HTTP(S) links in an unsafe way, enabling stored XSS. Exploitation requires Item/Configure permission. Affected versions and root cause are described in the CVE entry ...

CVE-2023-25761

Technical details about CVE-2023-25761 are not publicly provided in the supplied documents. No concrete affected products, versions, impact, or fixes are confirmed here. Monitor for updates.

CVE-2022-34176

CVE-2022-34176 affects Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier. The issue is a stored cross-site scripting (XSS) vulnerability caused by the plugin not escaping descriptions of test results, enabling exploitation by attackers with Run/Update permission. Public reports show a Medium...

CVE-2018-1000056

The CVE-2018-1000056 entry concerns Jenkins JUnit Plugin

CVE-2018-1000411

The provided connected documents confirm CVE-2018-1000411 is a CSRF vulnerability in Jenkins JUnit Plugin (versions up to 1.25) affecting TestObject.java, allowing an attacker to set the description of a test result. The vulnerability description is consistent across sources (NVD, Red Hat, GHSA, ...