Active Choices (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 48 known versions, newest CVE from 2021-11-12. Vendor: Jenkins.

CVEs of Active Choices

• CVE-2021-21699 - CVSS 5.4 (medium), 2021-11-12: Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a…
• CVE-2021-21616 - CVSS 4.6 (medium), 2021-02-24: Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability…
• CVE-2020-2289 - CVSS 5.4 (medium), 2020-10-08: Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS)…
• CVE-2020-2290 - CVSS 5.4 (medium), 2020-10-08: Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored…
• CVE-2017-1000386 - CVSS 5.4 (medium), 2018-01-26: Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With…