AC
Product
Active Choices
5
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Active Choices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21699 | 5.4 | Nov 12 | Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a stored cross-site… Affected: through 2.5.6 |
| CVE-2020-2290 | 5.4 | Oct 8 | Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored cross-site scripting… Affected: through 2.4 |
| CVE-2020-2289 | 5.4 | Oct 8 | Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS) vulnerability… Affected: through 2.4 |
| CVE-2017-1000386 | 5.4 | Jan 26 | Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page… Affected: through 1.5.2; 1.5.3; 1.5.3 |
| CVE-2021-21616 | 4.6 | Feb 24 | Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers… Affected: through 2.5.2 |
Showing 5