Jenkins JUnit Plugin CSRF vulnerability

MEDIO 6.5CVE-2018-1000411 · GHSA-x9gm-m8pp-54vx · Published 09/01/2019 · updated 17/06/2026

In breve

CVE-2018-1000411 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda org.jenkins-ci.plugins:junit, junit (jenkins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.81%, superiore al 56.9% delle vulnerabilità.
Correzione: aggiornare a 1.26 o successiva.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:junit Maven	`< 1.26`	`1.26`
junit jenkins	`≤ 1.25`	No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

References

nvd.nist.gov/vuln/detail/CVE-2018-1000411 · ADVISORY
jenkinsci/junit-plugin commit 091ee0d · WEB
jenkinsci/junit-plugin · WEB
jenkins.io/security/advisory/2018-09-25 · WEB
web.archive.org/web/20200227092927/http://www.securityfocus.com/bid/106532 · WEB
securityfocus.com/bid/106532 · Third Party Advisory

Altre vulnerabilità di org.jenkins-ci.plugins:junit

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:junit

Maven

< 1.26

1.26

junit

jenkins

≤ 1.25

No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

Altre vulnerabilità di org.jenkins-ci.plugins:junit

Vedi tutto →