Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-1000411 1 Jenkins 1 Junit 2024-11-21 N/A
A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.
CVE-2018-1000056 1 Jenkins 1 Junit 2024-11-21 N/A
Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks.