Stored Cross-Site Scripting in Jenkins JUnit Plugin by Jenkins

CVE-2022-34176

Summary

The Jenkins JUnit Plugin suffers from a stored cross-site scripting (XSS) vulnerability because it fails to properly escape the descriptions of test results. This security flaw can be exploited by attackers who possess Run or Update permissions, potentially allowing them to inject malicious scripts into the web application. This could lead to unauthorized actions or information disclosure, compromising the integrity and security of affected Jenkins instances.

References