Embeddable Build Status vulnerabilities

2 known vulnerabilities in Embeddable Build Status from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jenkins Embeddable Build Status Plugin: Incorrect Authorization

  CVE-2022-34180Jun 23, 2022JenkinsEPSS 1.28%

  Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status ba

• 7.5 High severity

  Jenkins Embeddable Build Status Plugin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-34179Jun 23, 2022JenkinsEPSS 1.81%

  Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attack