CVE-2023-32984

CVSS 5.4 MEDIUMEPSS 0.5%CWE-79

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.4EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

16 may 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Productos afectados

Jenkins Project · Jenkins TestNG Results Plugin

Referencias

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047