CVE-2018-1000411: Jenkins Junit

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of a test result.

Affected products

• Jenkins Junit: up to and including 1.25

Published 2019-01-09. Last modified 2026-06-17.