TSSA-2025-00001
Vulnerability from csaf_trustsource - Published: 2025-10-06 11:54 - Updated: 2025-10-06 11:54Summary
Project CSAF document
Notes
Author comment: Detailed list of project vulnerabilities
Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.
5.4 (Medium)
Affected products
Under investigation
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
ecs-java-client
EACG Operations Solutions GmbH / JavaTools
|
0.4.0 |
Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
5.4 (Medium)
Affected products
Under investigation
1 product, the same list as for
CVE-2023-25761
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
5.5 (Medium)
Affected products
Under investigation
1 product, the same list as for
CVE-2023-25761
References
6 references
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Detailed list of project vulnerabilities",
"title": "Author comment"
}
],
"publisher": {
"category": "vendor",
"name": "TrustSource Product and Service Security",
"namespace": "https://app.trustsource.io/"
},
"title": "Project CSAF document",
"tracking": {
"current_release_date": "2025-10-06T11:54:52.856Z",
"generator": {
"date": "2025-10-06T11:54:52.856Z",
"engine": {
"name": "TrustSource-CSAF",
"version": "1.0.0"
}
},
"id": "tssa-2025-00001",
"initial_release_date": "2025-10-06T11:54:52.856Z",
"revision_history": [
{
"date": "2025-10-06T11:54:52.856Z",
"number": "1",
"summary": "Initial version."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "0.4.0",
"product": {
"name": "ecs-java-client",
"product_id": "U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
}
}
],
"category": "product_name",
"name": "JavaTools"
}
],
"category": "vendor",
"name": "EACG Operations Solutions GmbH"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-25761",
"cwe": {
"id": "CWE-79",
"name": "CWE-79"
},
"notes": [
{
"category": "description",
"text": "Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.",
"title": "CVE description"
}
],
"product_status": {
"under_investigation": [
"U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
]
},
"references": [
{
"category": "external",
"summary": "Mailing List - Third Party Advisory",
"url": "http://www.openwall.com/lists/oss-security/2023/02/15/4"
},
{
"category": "external",
"summary": "Vendor Advisory",
"url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032"
},
{
"category": "external",
"summary": "Mailing List - Third Party Advisory",
"url": "http://www.openwall.com/lists/oss-security/2023/02/15/4"
},
{
"category": "external",
"summary": "Vendor Advisory",
"url": "https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
]
}
]
},
{
"cve": "CVE-2022-45380",
"cwe": {
"id": "CWE-79",
"name": "CWE-79"
},
"notes": [
{
"category": "description",
"text": "Jenkins JUnit Plugin 1159.v0b_396e1e07dd and earlier converts HTTP(S) URLs in test report output to clickable links in an unsafe manner, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.",
"title": "CVE description"
}
],
"product_status": {
"under_investigation": [
"U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
]
},
"references": [
{
"category": "external",
"summary": "Mailing List",
"url": "http://www.openwall.com/lists/oss-security/2022/11/15/4"
},
{
"category": "external",
"summary": "Vendor Advisory",
"url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2888"
},
{
"category": "external",
"summary": "Mailing List",
"url": "http://www.openwall.com/lists/oss-security/2022/11/15/4"
},
{
"category": "external",
"summary": "Vendor Advisory",
"url": "https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
]
}
]
},
{
"cve": "CVE-2023-0482",
"cwe": {
"id": "CWE-378",
"name": "CWE-378"
},
"notes": [
{
"category": "description",
"text": "In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.",
"title": "CVE description"
}
],
"product_status": {
"under_investigation": [
"U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
]
},
"references": [
{
"category": "external",
"summary": "Patch",
"url": "https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56"
},
{
"category": "external",
"summary": "Third Party Advisory",
"url": "https://security.netapp.com/advisory/ntap-20230427-0001/"
},
{
"category": "external",
"summary": "Patch",
"url": "https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56"
},
{
"category": "external",
"summary": "Third Party Advisory",
"url": "https://security.netapp.com/advisory/ntap-20230427-0001/"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"U2FsdGVkX1/PvkRLmbU707SrI0ySwi7noULP/t0B93/l"
]
}
]
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…