Dynamic Extended Choice Parameter (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-07-27. Vendor: Jenkins.

CVEs of Dynamic Extended Choice Parameter

• CVE-2022-36902 - CVSS 5.4 (medium), 2022-07-27: Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored…
• CVE-2022-34186 - CVSS 5.4 (medium), 2022-06-23: Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape the name and description of Moded Extended Choice parameters on views…
• CVE-2020-2124 - CVSS 4.3 (medium), 2020-02-12: Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be…