CVE-2022-34178

2022-06-2317:15:15

Google

osv.dev

0.001 Low

EPSS

Percentile

31.3%

JSON

Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a ‘link’ query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability.

CPENameOperatorVersion
embeddable-build-status-plugineqembeddable-build-status-1.7
embeddable-build-status-plugineqembeddable-build-status-2.0-beta2
embeddable-build-status-plugineqembeddable-build-status-2.0.1
embeddable-build-status-plugineqembeddable-build-status-1.2
embeddable-build-status-plugineqembeddable-build-status-2.0-beta1
embeddable-build-status-plugineqembeddable-build-status-2.0.2
embeddable-build-status-plugineqembeddable-build-status-1.5
embeddable-build-status-plugineqembeddable-build-status-1.1
embeddable-build-status-plugineqembeddable-build-status-1.6
embeddable-build-status-plugineqembeddable-build-status-1.8

Name	Operator	Version
embeddable-build-status-plugin	eq	embeddable-build-status-1.7
embeddable-build-status-plugin	eq	embeddable-build-status-2.0-beta2
embeddable-build-status-plugin	eq	embeddable-build-status-2.0.1
embeddable-build-status-plugin	eq	embeddable-build-status-1.2
embeddable-build-status-plugin	eq	embeddable-build-status-2.0-beta1
embeddable-build-status-plugin	eq	embeddable-build-status-2.0.2
embeddable-build-status-plugin	eq	embeddable-build-status-1.5
embeddable-build-status-plugin	eq	embeddable-build-status-1.1
embeddable-build-status-plugin	eq	embeddable-build-status-1.6
embeddable-build-status-plugin	eq	embeddable-build-status-1.8