| Package | Affected versions | Patched versions |
|---|---|---|
| com.smalltest:smalltest | ≤ 1.0.4 | |
| smalltest | ≤ 1.0.4 |
Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections. There is currently no known workaround or fix for this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free