Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:junit

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.0
    CVE-2022-34176 EPSS 78%

    Cross-site Scripting in Jenkins JUnit Plugin

    Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

    Jenkins Project Jenkins JUnit Plugin org.jenkins-ci.plugins:junit Web / CMS Maven
  • High 8.3
    CVE-2018-1000056

    Improper Restriction of XML External Entity Reference in Jenkins JUnit Plugin

    Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or deni…

    org.jenkins-ci.plugins:junit Maven