CVE-2022-34178: Jenkins Embeddable Build Status

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting (XSS) vulnerability.

Affected products

• Jenkins Embeddable Build Status: version 2.0.3 only

Published 2022-06-23. Last modified 2026-06-17.