- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 5 · 2 medium
- Registry
- Maven Central
Advisories 5
- CVE-2023-25761Medium 5.4
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a…
Affected: fixed in 1166.1168.vd6b_8042a_06de.
- CVE-2022-45380Medium 5.4
Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner…
Affected: fixed in 1160.vf1f01a_a_ea_b_7f.
- CVE-2022-34176Unrated
Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site…
Affected: fixed in 1119.1121.vc43d0fc45561.
- CVE-2018-1000411Unrated
A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the…
Affected: fixed in 1.26.
- CVE-2018-1000056Unrated
Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers…
Affected: fixed in 1.24.