CVE-2023-40342

MediumCVSS 5.4

Published: 16/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

40th percentile - higher than 40% of all known CVEs

Summary

Jenkins Flaky Test Handler Plugin version 1.2.2 and earlier does not escape JUnit test contents when displayed on the Jenkins UI, leading to a stored XSS vulnerability.

Risk Assessment

Attackers can exploit this vulnerability to inject malicious code, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to update the plugin to the latest version to mitigate this vulnerability and review and secure the contents of JUnit reports.

Original NVD description (English source)

Jenkins Flaky Test Handler Plugin 1.2.2 and earlier does not escape JUnit test contents when showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control JUnit report file contents.