CVE-2023-32984: 
Java vulnerability analysis and mitigation

CVE-2023-32984 is a stored cross-site scripting (XSS) vulnerability discovered in the Jenkins TestNG Results Plugin. The vulnerability affects versions up to and including 730.v4c5283037693, and was disclosed on May 16, 2023. The issue impacts the plugin's test information pages where certain values parsed from TestNG report files are displayed without proper escaping (Jenkins Advisory).

The vulnerability is classified as a stored XSS vulnerability with a severity rating of High. The core issue lies in the plugin's failure to properly escape several values that are parsed from TestNG report files when displaying them on the plugin's test information pages. This security flaw exists in TestNG Results Plugin version 730.v4c5283037693 and earlier versions (Jenkins Advisory).

The vulnerability allows attackers who can provide crafted TestNG report files to execute arbitrary JavaScript code in the context of other users' browsers when they view the affected test information pages. This could potentially lead to session hijacking, credential theft, or other malicious actions performed in the context of the victim's browser session (Jenkins Advisory).

The vulnerability has been fixed in TestNG Results Plugin version 730.732.v959a3aaeba_72. The fix implements proper escaping of the affected values that are parsed from TestNG report files. Users are advised to update to this version or later to mitigate the vulnerability (Jenkins Advisory).