Jenkins JUnit Plugin CSRF vulnerability

MEDIO 6.5CVE-2018-1000411 · GHSA-x9gm-m8pp-54vx · Published 09/01/2019 · updated 17/06/2026

En resumen

CVE-2018-1000411 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.jenkins-ci.plugins:junit, junit (jenkins).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.81%, mayor que el 56.9% de las vulnerabilidades.
Solución: actualizar a 1.26 o posterior.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:junit Maven	`< 1.26`	`1.26`
junit jenkins	`≤ 1.25`	No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

References

nvd.nist.gov/vuln/detail/CVE-2018-1000411 · ADVISORY
jenkinsci/junit-plugin commit 091ee0d · WEB
jenkinsci/junit-plugin · WEB
jenkins.io/security/advisory/2018-09-25 · WEB
web.archive.org/web/20200227092927/http://www.securityfocus.com/bid/106532 · WEB
securityfocus.com/bid/106532 · Third Party Advisory

Más vulnerabilidades de org.jenkins-ci.plugins:junit

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:junit

Maven

< 1.26

1.26

junit

jenkins

≤ 1.25

No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

Más vulnerabilidades de org.jenkins-ci.plugins:junit

Ver todo →