CVE-2019-10346: XSS
Published Jul 11, 2019
·Updated
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.
Affected Software
1 affected component
Jenkins Embeddable Build Status Jenkins<=2.0.1
Event History
Jul 11, 2019
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-10346?
CVE-2019-10346 has a medium severity level due to its ability to allow reflected cross site scripting attacks.
2
How do I fix CVE-2019-10346?
To fix CVE-2019-10346, upgrade the Jenkins Embeddable Build Status Plugin to version 2.0.2 or later.
3
What software is affected by CVE-2019-10346?
CVE-2019-10346 affects Jenkins Embeddable Build Status Plugin version 2.0.1 and earlier.
4
What type of vulnerability is CVE-2019-10346?
CVE-2019-10346 is a reflected cross site scripting (XSS) vulnerability.
5
How can attackers exploit CVE-2019-10346?
Attackers can exploit CVE-2019-10346 to inject arbitrary HTML and JavaScript into the plugin's response.