Jenkins JUnit Plugin CSRF vulnerability

MOYENNE 6.5CVE-2018-1000411 · GHSA-x9gm-m8pp-54vx · Published 09/01/2019 · updated 17/06/2026

En bref

CVE-2018-1000411 est une vulnérabilité MOYENNE (CVSS 6.5) touchant org.jenkins-ci.plugins:junit, junit (jenkins).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.81%, plus élevée que 56.9% des vulnérabilités.
Correctif : mettre à jour vers 1.26 ou plus récent.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:junit Maven	`< 1.26`	`1.26`
junit jenkins	`≤ 1.25`	No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

References

nvd.nist.gov/vuln/detail/CVE-2018-1000411 · ADVISORY
jenkinsci/junit-plugin commit 091ee0d · WEB
jenkinsci/junit-plugin · WEB
jenkins.io/security/advisory/2018-09-25 · WEB
web.archive.org/web/20200227092927/http://www.securityfocus.com/bid/106532 · WEB
securityfocus.com/bid/106532 · Third Party Advisory

Autres vulnérabilités de org.jenkins-ci.plugins:junit

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:junit

Maven

< 1.26

1.26

junit

jenkins

≤ 1.25

No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

Autres vulnérabilités de org.jenkins-ci.plugins:junit

Tout voir →