Jenkins JUnit Plugin CSRF vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-1000411 · ADVISORY
• jenkinsci/junit-plugin commit 091ee0d · WEB
• jenkinsci/junit-plugin · WEB
• jenkins.io/security/advisory/2018-09-25 · WEB
• web.archive.org/web/20200227092927/http://www.securityfocus.com/bid/106532 · WEB
• securityfocus.com/bid/106532 · Third Party Advisory

Lỗ hổng khác của org.jenkins-ci.plugins:junit

• CVE-2023-25761TRUNG BÌNH 5.4Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored …
• CVE-2022-45380TRUNG BÌNH 5.4Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, res…
• CVE-2022-34176TRUNG BÌNH 5.4Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site script…
• CVE-2018-1000056CAO 8.3Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers wi…