Filtered by vendor Jenkins Subscriptions
Filtered by product Tests Selector Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-28160 1 Jenkins 1 Tests Selector 2024-11-21 6.5 Medium
Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller.
CVE-2022-28159 1 Jenkins 1 Tests Selector 2024-11-21 5.4 Medium
Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.