Jenkins Testng Results vulnerabilities

2 CVEs affecting Jenkins Testng Results, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32984, published 2023-05-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-34778, published 2022-06-30. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in…
CVE-2023-32984, published 2023-05-16. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in…