Jenkins Project Jenkins Junit Plugin vulnerabilities

3 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Junit Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2022-45380jenkins projectjenkins junit plugin+2
EPSS score
0.66%
Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.5.4CVE-2022-34176jenkins projectjenkins junit plugin+2
EPSS score
77.07%
Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.5.4CVE-2023-25761jenkins projectjenkins junit plugin+2
EPSS score
0.70%
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.