CVE-2023-25761
Assigner: jenkins
Published: 2023-02-15T00:00:00
State: PUBLISHED
affected: product: Jenkins JUnit Plugin
vendor: Jenkins Project
versions: lessThanOrEqual: 1166.va_436e268e972
status: affected
version: unspecified
versionType: custom
status: unaffected
version: 1119.1124.va_a_8ccde5658f
descriptions: value: Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.