{"action":"Upgrade io.jenkins.plugins:embeddable-build-status-plugin to 2.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"0"}],"component":"io.jenkins.plugins:embeddable-build-status-plugin","cve_ids":["CVE-2019-10346"],"ecosystem":"Maven","epss":0.01693,"exploited":false,"fixed_versions":["2.0.2"],"ghsa_id":"GHSA-94rj-c4jj-v476","id":"tcs_01M5N8P4A6S7AFY37A5M263XCY","modified_at":"2023-11-08T04:00:47.263943Z","published_at":"2022-05-24T16:50:03Z","references":["https://osv.dev/vulnerability/GHSA-94rj-c4jj-v476","https://nvd.nist.gov/vuln/detail/CVE-2019-10346","https://github.com/jenkinsci/embeddable-build-status-plugin","https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1419","http://www.openwall.com/lists/oss-security/2019/07/11/4","http://www.securityfocus.com/bid/109156"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-94rj-c4jj-v476","url":"https://osv.dev/vulnerability/GHSA-94rj-c4jj-v476"}],"summary":"Jenkins Embeddable Build Status Plugin contains Cross-site Scripting"}