org.jenkins-ci.plugins:TestComplete

3 results · Feed

• Medium 5.4
  CVE-2023-33002

  TestComplete support Plugin vulnerable to stored Cross-site Scripting

  Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

  Jenkins Project Jenkins TestComplete support Plugin org.jenkins-ci.plugins:TestComplete Web / CMS Maven
  May 16, 2023
• Critical 9.8
  CVE-2023-24443

  XML Entity Expansion in Jenkins TestComplete support Plugin

  Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  Jenkins Project Jenkins TestComplete support Plugin org.jenkins-ci.plugins:TestComplete Web / CMS Maven
  Jan 24, 2023
• Medium 4.3
  CVE-2020-2209

  Password stored in plain text by Jenkins TestComplete support Plugin

  Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

  Jenkins Project Jenkins TestComplete support Plugin org.jenkins-ci.plugins:TestComplete Web / CMS Maven
  Jul 2, 2020