CVE-2022-34180

Maven/org.jenkins-ci.plugins:embeddable-build-status CVE-2022-34180: medium 5.3

Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement

Action: Upgrade org.jenkins-ci.plugins:embeddable-build-status to 2.0.4 or later.

Affected

Fixed versions

Sources

• osv: GHSA-xxhf-xq6v-c8mj
• https://nvd.nist.gov/vuln/detail/CVE-2022-34180
• https://github.com/jenkinsci/embeddable-build-status-plugin/commit/402148784b3f4b029eaf47cc26ebf6b9bc636183
• https://github.com/jenkinsci/embeddable-build-status-plugin
• https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2794

CVE-2022-34180 · published 2022-06-24T00:00:31Z · modified 2024-02-16T08:13:57.543598Z · JSON