Embeddable Build Status (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2022-06-23. Vendor: Jenkins.

CVEs of Embeddable Build Status

• CVE-2022-34180 - CVSS 7.5 (high), 2022-06-23: Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for…
• CVE-2022-34179 - CVSS 7.5 (high), 2022-06-23: Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style…
• CVE-2022-34178 - CVSS 6.1 (medium), 2022-06-23: Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible…
• CVE-2019-10346 - CVSS 6.1 (medium), 2019-07-11: A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and…