Jenkins Project Jenkins build-metrics Plugin

• CVE-2022-34785 Unrated Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise i 0.7%
• CVE-2022-34784 Unrated Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Build/Update pe 0.8%