CVE-2016-4986

The CVE-2016-4986 entry concerns a directory traversal in the Jenkins TAP Plugin (versions before 1.25). The vulnerability allows remote attackers to read arbitrary files via an unspecified parameter, exposing partial confidentiality and reflecting a network-accessible risk with low complexity an...

CVE-2023-41940

CVE-2023-41940 affects Jenkins TAP Plugin up to version 2.3. The vulnerability arises because TAP file contents are not escaped, allowing stored cross-site scripting (XSS) when an attacker can control the TAP content. The issue is explicitly described as a stored XSS in the TAP Plugin. Multiple c...