Server side cross-site scripting In org.jenkins-ci.plugins:junit
Description
Cross-site Scripting in Jenkins JUnit Plugin JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.
JUnit Plugin 1119.1121.vc43d0fc45561 applies the configured markup formatter to descriptions of test results.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1119.1121.vc43d0fc45561 |
Aliases
1. 2. 3. 4.
References
1. 2.