Lucene search

K
osvGoogleOSV:GHSA-64MJ-3P92-589V
HistoryJun 24, 2022 - 12:00 a.m.

Cross-site Scripting in Jenkins JUnit Plugin

2022-06-2400:00:31
Google
osv.dev
22

0.001 Low

EPSS

Percentile

22.0%

JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

JUnit Plugin 1119.1121.vc43d0fc45561 applies the configured markup formatter to descriptions of test results.