Vulnerabilities > Jenkins > TAP > 1.13

DATE CVE VULNERABILITY TITLE RISK
2023-09-06 CVE-2023-41940 Cross-site Scripting vulnerability in Jenkins TAP
Jenkins TAP Plugin 2.3 and earlier does not escape TAP file contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control TAP file contents.
network
low complexity
jenkins CWE-79
5.4
2017-02-09 CVE-2016-4986 Path Traversal vulnerability in Jenkins TAP
Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.
network
low complexity
jenkins CWE-22
5.0