Junglewise Threat Intelligence

CVE-2022-34178: Reflected Cross site scripting in Jenkins Embeddable Build Status Plugin

CVE-2022-34178 · Severity: low · CVSS 3.1 · Published 2022-06-24

Technologies: org.jenkins-ci.plugins:embeddable-build-status (Maven). Vendors: Maven.

Executive brief

Reflected Cross site scripting in Jenkins Embeddable Build Status Plugin

Affected products

Maven org.jenkins-ci.plugins:embeddable-build-status

Related threats

Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin
Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement