Jenkins JUnit Plugin CSRF vulnerability

MÉDIO 6.5CVE-2018-1000411 · GHSA-x9gm-m8pp-54vx · Published 09/01/2019 · updated 17/06/2026

Em resumo

CVE-2018-1000411 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta org.jenkins-ci.plugins:junit, junit (jenkins).
Chance de exploração nos próximos 30 dias (EPSS): 0.81%, maior que 56.9% das vulnerabilidades.
Correção: atualize para 1.26 ou posterior.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:junit Maven	`< 1.26`	`1.26`
junit jenkins	`≤ 1.25`	No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

References

nvd.nist.gov/vuln/detail/CVE-2018-1000411 · ADVISORY
jenkinsci/junit-plugin commit 091ee0d · WEB
jenkinsci/junit-plugin · WEB
jenkins.io/security/advisory/2018-09-25 · WEB
web.archive.org/web/20200227092927/http://www.securityfocus.com/bid/106532 · WEB
securityfocus.com/bid/106532 · Third Party Advisory

Mais vulnerabilidades de org.jenkins-ci.plugins:junit

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:junit

Maven

< 1.26

1.26

junit

jenkins

≤ 1.25

No fix yet

Description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

NVD description

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

Mais vulnerabilidades de org.jenkins-ci.plugins:junit

Ver tudo →