Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Jenkins Extended Choice Parameter Plugin unspecified Clear all filters
TI-2022-10327 CVE-2022-27205 · GHSA-x95c-qrqr-2v27

Missing authorization in Jenkins Extended Choice Parameter Plugin

Priority LOW 21

A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00764 Published 2022-03-15 No fix listed CWE-862
TI-2022-10326 CVE-2022-27204 · GHSA-fqpx-xfjr-2qr9

Cross-site request forgery in Jenkins Extended Choice Parameter Plugin

Priority LOW 39

A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to connect to an attacker-specified URL.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00578 Published 2022-03-15 Fixed in 356.va_90a_94ca_62ec CWE-352
TI-2022-10325 CVE-2022-27203 · GHSA-ch63-6cmg-gwg2

Path traversal in Jenkins Extended Choice Parameter Plugin

Priority LOW 32

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0158 Published 2022-03-15 No fix listed CWE-22
TI-2022-10324 CVE-2022-27202 · GHSA-h2v5-3hpc-85j5

Cross-site scripting in Jenkins Extended Choice Parameter Plugin

Priority LOW 25

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scrip…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00658 Published 2022-03-15 No fix listed CWE-79