Description
A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/07/11/4
http://www.securityfocus.com/bid/109156
https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1419
Related Vulnerabilities
CVE-2020-2132 Vulnerability in maven package com.parasoft:environment-manager
CVE-2022-38750 Vulnerability in maven package org.yaml:snakeyaml
CVE-2022-23646 Vulnerability in npm package next
CVE-2018-1320 Vulnerability in maven package org.apache.thrift:libthrift
CVE-2021-27850 Vulnerability in maven package org.apache.tapestry:tapestry-core