Build-metrics (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2022-06-30. Vendor: Jenkins.

CVEs of Build-metrics

• CVE-2022-34784 - CVSS 5.4 (medium), 2022-06-30: Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability…
• CVE-2022-34785 - CVSS 4.3 (medium), 2022-06-30: Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to…
• CVE-2019-10475 - CVSS 6.1 (medium), 2019-10-23: A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages…