Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_xunit_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Xunit Plugin (cb09db3f-6a5e-5159-8926-5dfc883f6219)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-34181 vulnerable 2026-06-08 05:44:52.375390 Details available
Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.
Published: 2022-06-22T14:41:08.000Z
Updated: 2024-08-03T08:16:17.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.