vulnerability

Jenkins Advisory 2022-06-22: CVE-2022-34176: Stored XSS vulnerability in JUnit Plugin

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:N/I:P/A:N)

Published

Jun 23, 2022

Added

Jul 12, 2022

Modified

Mar 27, 2026

Description

Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission.

Solutions

jenkins-lts-upgrade-2_332_4jenkins-upgrade-2_356

References

CVE-2022-34176
https://attackerkb.com/topics/CVE-2022-34176
CWE-79
EUVD-EUVD-2022-5950
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5950
https://jenkins.io/security/advisory/2022-06-22/

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report