Extended Choice Parameter (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-04-12. Vendor: Jenkins.

CVEs of Extended Choice Parameter

• CVE-2022-29038 - CVSS 5.4 (medium), 2022-04-12: Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice parameters on views…
• CVE-2022-27205 - CVSS 4.3 (medium), 2022-03-15: A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read permission to connect…
• CVE-2022-27204 - CVSS 8.8 (high), 2022-03-15: A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to connect to an…
• CVE-2022-27202 - CVSS 5.4 (medium), 2022-03-15: Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio…
• CVE-2022-27203 - CVSS 6.5 (medium), 2022-03-15: Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and…