Jenkins

Dynamic Extended Choice Parameter

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2022-36902

  • EPSS 20.6%
  • Published 27.07.2022 15:15:09
  • Last modified 21.11.2024 07:14:02

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permiss...

5.4

CVE-2022-34186

  • EPSS 31.6%
  • Published 23.06.2022 17:15:16
  • Last modified 21.11.2024 07:09:01

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable...

4.3

CVE-2020-2124

  • EPSS 0.03%
  • Published 12.02.2020 15:15:13
  • Last modified 21.11.2024 05:24:43

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.