Badge (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2022-01-12. Vendor: Jenkins.

CVEs of Badge

• CVE-2022-23108 - CVSS 5.4 (medium), 2022-01-12: Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resulting in a stored…
• CVE-2018-1000604 - CVSS 5.4 (medium), 2018-06-26: A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows…