Maven/org.jenkins-ci.plugins:junit CVE-2023-25761: medium 5.4, EPSS 0.70%
Cross-site Scripting in Jenkins JUnit Plugin
Action: Upgrade org.jenkins-ci.plugins:junit to 1166.1168.vd6b_8042a_06de or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1166.1168.vd6b_8042a_06de | - |
Fixed versions
| 1166.1168.vd6b_8042a_06de |
Sources
- osv: GHSA-ph74-8rgx-64c5
- https://nvd.nist.gov/vuln/detail/CVE-2023-25761
- https://github.com/jenkinsci/junit-plugin/commit/d6b8042a06de4aaaf0942ad79036095b853eea02
- https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032
- http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE-2023-25761 · published · modified · JSON