Embeddable Build Status Security Vulnerabilities and Issues — Embeddable Build Status CVE List

Lucene search

JenkinsEmbeddable Build Status

2 matches found

CVE•added 2022/06/23 5:15 p.m.•88 views

CVE-2022-34178

Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability.

6.1CVSS5.8AI score0.16129EPSS

CVE•added 2019/07/11 2:15 p.m.•43 views

CVE-2019-10346

A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.

6.1CVSS6AI score0.00297EPSS