Login Request a demo
JU
Product
Junit
by Jenkins · last CVE Feb 15, 2023
5
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Junit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1000056
8.3
1%
Feb 9
Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to…
Affected: through 1.23
CVE-2018-1000411
6.5
1%
Jan 9
A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result
Affected: through 1.25
CVE-2023-25761
5.4
1%
Feb 15
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS)…
Affected: through 1166.va_436e268e972
CVE-2022-45380
5.4
1%
Nov 15
Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting…
Affected: before 1160.vf1f01a_a_ea_b_7f
CVE-2022-34176
5.4
78%
Jun 23
Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by…
Affected: through 1119.va_a_5e9068da_d7
Showing 5