漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
JUnit OpenTestReportGeneratingListener can leak Git credentials
Vulnerability Description
JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are published or stored anywhere public, then there is the possibility that a rouge attacker can steal the token and perform elevated actions by impersonating the user or app. This issue as been patched in version 5.13.2.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Vulnerability Type
敏感数据的明文存储
Vulnerability Title
JUnit 安全漏洞
Vulnerability Description
JUnit是JUnit开源的一个Java语言的测试框架。 JUnit 5.12.0至5.13.1版本存在安全漏洞，该漏洞源于Open Test Reporting XML文件可能泄露Git凭据。
CVSS Information
N/A
Vulnerability Type
N/A