CVE-2025-53103
1 advisory.
Maven/org.junit.platform:junit-platform-reporting CVE-2025-53103: medium 5.8
junit-platform-reporting can leak Git credentials through its OpenTestReportGeneratingListener
Action: Upgrade org.junit.platform:junit-platform-reporting to 5.13.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.12.0 | 5.13.2 | - |
Fixed versions
| 5.13.2 |
Sources
- osv: GHSA-m43g-m425-p68x
- https://github.com/junit-team/junit-framework/security/advisories/GHSA-m43g-m425-p68x
- https://nvd.nist.gov/vuln/detail/CVE-2025-53103
- https://github.com/junit-team/junit-framework/commit/d4fc834c8c1c0b3168cd030c13551d1d041f51bc
- https://github.com/junit-team/junit-framework
- https://github.com/junit-team/junit-framework/blob/6b7764dac92fd35cb348152d1b37f8726875a4e0/junit-platform-reporting/src/main/java/org/junit/platform/reporting/open/xml/OpenTestReportGeneratingListener.java#L183
CVE-2025-53103 · published · modified · JSON