CVE-2019-10346: Jenkins Embeddable Build Status

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.

Affected products

• Jenkins Embeddable Build Status: up to and including 2.0.1

Published 2019-07-11. Last modified 2026-06-17.