← CVE Intelligence

CVE-2022-34178

Jenkins project / Jenkins Embeddable Build Status Plugin PUBLISHED

Description (CNA)

Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Embeddable Build Status Pluginaffected 2.0.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.