CVE-2022-34778

Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain…

published June 30, 2022

CVSS
—
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or control test results.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00600 · 48.0th percentile
Published
2022-06-30T17:45Z
EPSS history
Timeline
  • 30 JUN 17:45Z
    Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain…
    cvelistv5