Published: 15/11/2022 Updated: 22/11/2023

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 0

Jenkins JUnit Plugin 1159.v0b_396e1e07dd and previous versions converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jenkins junit

Synopsis Critical: OpenShift Container Platform 41051 security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic Red Hat OpenShift Container Platform release 41051 is now available with updates to packages and ima ...

Synopsis Critical: OpenShift Container Platform 4956 security update Type/Severity Security Advisory: Critical Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic Red Hat OpenShift Container Platform release 4956 is now available with updates to packages and image ...

Synopsis Moderate: OpenShift Container Platform 4956 security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4956 is now available with updates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Container Platf ...

Description This CVE is under investigation by Red Hat Product Security ...

CWE-79 https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2888 http://www.openwall.com/lists/oss-security/2022/11/15/4 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2023:0560 https://access.redhat.com/security/cve/cve-2022-45380

CVE-2022-45380

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect