CVE-2023-32984

MEDIUM

5.4

Description

Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.

Details CVE

Score CVSS v3.15.4

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie5/16/2023

Derniere modification1/23/2025

Sourcenvd

Observations honeypot0

Produits affectes

jenkins:testng_results

Faiblesses (CWE)

CWE-79CWE-79

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047(jenkinsci-cert@googlegroups.com)

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.