Jenkins Active Choices Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-11-12. Vendor: Jenkins Project.

CVEs of Jenkins Active Choices Plugin

• CVE-2021-21699 - CVSS 5.4 (medium), 2021-11-12: Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a…
• CVE-2021-21616 - CVSS 4.6 (medium), 2021-02-24: Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability…
• CVE-2020-2290 - CVSS 5.4 (medium), 2020-10-08: Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored…
• CVE-2020-2289 - CVSS 5.4 (medium), 2020-10-08: Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS)…