CVE-2019-10346

Summary of CVE-2019-10346 : A reflected cross-site scripting vulnerability in the Jenkins Embeddable Build Status Plugin (versions ≤ 2.0.1) allows attackers to inject arbitrary HTML and JavaScript into the plugin response. The issue stems from unsafe handling of output in the plugin, enabling cli...

PT-2019-11745 · Jenkins · Jenkins Embeddable Build Status Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.1 and earlier Description: A reflected cross site scripting issue allows attackers to inject arbitrary HTML and JavaScript into the response of the plugin. This enables them to execute...

CVE-2019-10346: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin...