Jenkins Embeddable Build Status Plugin

3 results · Clear filters · Feed

• Medium 5.3
  CVE-2022-34180

  Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement

  Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status b…

  Jenkins Project Jenkins Embeddable Build Status Plugin org.jenkins-ci.plugins:embeddable-build-status Web / CMS Maven
  Jun 22, 2022
• Medium 5.3
  CVE-2022-34179

  Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin

  Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attac…

  Jenkins Project Jenkins Embeddable Build Status Plugin org.jenkins-ci.plugins:embeddable-build-status Web / CMS Maven
  Jun 22, 2022
• Medium 6.1
  CVE-2019-10346

  Jenkins Embeddable Build Status Plugin contains Cross-site Scripting

  A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.

  Jenkins Project Jenkins Embeddable Build Status Plugin io.jenkins.plugins:embeddable-build-status-plugin Web / CMS Maven
  Jul 11, 2019