Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40727
HistoryMay 30, 2023 - 8:15 a.m.

Cross-Site Scripting (XSS)

2023-05-3008:15:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
jenkins
testng
cross-site scripting

EPSS

0.001

Percentile

29.5%

Jenkins TestNG Results Plugin is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists due to lack of escaping of values that are parsed from TestNG report files which allows an attacker to inject and execute arbitrary JavaScript.

EPSS

0.001

Percentile

29.5%