1 result · Clear filters · Feed
-
Medium 6.5
Agent-to-controller security bypass in Jenkins xUnit Plugin
Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrar…