CVE-2022-34778

The CVE-2022-34778 entry affects the Jenkins TestNG Results Plugin (554.va4a552116332 and earlier). The vulnerability arises when the plugin renders unescaped test descriptions and exception messages in test results, enabling cross-site scripting (XSS) if an attacker can configure jobs or control...

CVE-2023-32984

CVE-2023-32984 affects the Jenkins TestNG Results Plugin (730.v4c5283037693 and earlier). The vulnerability is a stored XSS caused by insufficient escaping of values parsed from TestNG report files, which are displayed on the plugin’s test information pages. Exploitation requires an attacker to s...