GHSA-ph74-8rgx-64c5
GitHub Security Advisory
Cross-site Scripting in Jenkins JUnit Plugin
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.
Affected Packages
Maven
org.jenkins-ci.plugins:junit
Affected versions:
0
(fixed in 1166.1168.vd6b_8042a_06de)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 4, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.