GHSA-q787-qgw2-j2qfMediumCVSS 5.4

Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin

Published
March 30, 2022
Last Modified
October 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-28159 →

📋 Description

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:selected-tests-executor:<= 1.3.3

🔗 References (4)