Login Request a demo
EC
Product
Extended Choice Parameter
by Jenkins · last CVE Apr 12, 2022
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Extended Choice Parameter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-27204
8.8
1%
Mar 15
A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to connect to an attacker-specified URL
Affected: through 346.vd87693c5a_86c
CVE-2022-27203
6.5
2%
Mar 15
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties…
Affected: through 346.vd87693c5a_86c
CVE-2022-29038
5.4
1%
Apr 12
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters,…
Affected: through 346.vd87693c5a_86c
CVE-2022-27202
5.4
1%
Mar 15
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes…
Affected: through 346.vd87693c5a_86c
CVE-2022-27205
4.3
1%
Mar 15
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read permission to connect to an…
Affected: through 346.vd87693c5a_86c
Showing 5