Vulnerability Description
JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are published or stored anywhere public, then there is the possibility that a rouge attacker can steal the token and perform elevated actions by impersonating the user or app. This issue as been patched in version 5.13.2.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/junit-team/junit-framework/commit/d4fc834c8c1c0b3168cd030c135
- https://github.com/junit-team/junit-framework/security/advisories/GHSA-m43g-m425
FAQ
What is CVE-2025-53103?
CVE-2025-53103 is a vulnerability with a CVSS score of 5.8 (MEDIUM). JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of...
How severe is CVE-2025-53103?
CVE-2025-53103 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-53103?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.