CVE-2022-34778

State: Published
Severity: Not scored
Published: Jun 30, 2022
Updated: Nov 20, 2024
Reserved: Jun 29, 2022

Description

Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or control test results.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Jenkins TestNG Results PluginJenkins project	554.va4a552116332 and earlierAffected

References

https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2788

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.