medium6.1
CVE-2019-10346
Jenkins Embeddable Build Status Plugin contains Cross-site Scripting
Impact
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.jenkins.plugins:embeddable-build-status-plugin | < 2.0.2 | 2.0.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Embeddable Build Status | through 2.0.1 |