CVE-2022-34179

2022-06-2317:15:15

Google

osv.dev

0.002 Low

EPSS

Percentile

51.8%

JSON

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a style query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system.

CPENameOperatorVersion
embeddable-build-status-plugineqembeddable-build-status-1.7
embeddable-build-status-plugineqembeddable-build-status-2.0-beta2
embeddable-build-status-plugineqembeddable-build-status-2.0.1
embeddable-build-status-plugineqembeddable-build-status-1.2
embeddable-build-status-plugineqembeddable-build-status-2.0-beta1
embeddable-build-status-plugineqembeddable-build-status-2.0.2
embeddable-build-status-plugineqembeddable-build-status-1.5
embeddable-build-status-plugineqembeddable-build-status-1.1
embeddable-build-status-plugineqembeddable-build-status-1.6
embeddable-build-status-plugineqembeddable-build-status-1.8

Name	Operator	Version
embeddable-build-status-plugin	eq	embeddable-build-status-1.7
embeddable-build-status-plugin	eq	embeddable-build-status-2.0-beta2
embeddable-build-status-plugin	eq	embeddable-build-status-2.0.1
embeddable-build-status-plugin	eq	embeddable-build-status-1.2
embeddable-build-status-plugin	eq	embeddable-build-status-2.0-beta1
embeddable-build-status-plugin	eq	embeddable-build-status-2.0.2
embeddable-build-status-plugin	eq	embeddable-build-status-1.5
embeddable-build-status-plugin	eq	embeddable-build-status-1.1
embeddable-build-status-plugin	eq	embeddable-build-status-1.6
embeddable-build-status-plugin	eq	embeddable-build-status-1.8