| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:selected-tests-executor | ≤ 1.3.3 | |
| tests selector | ≤ 1.3.3 |
Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free