Jenkins Project Jenkins Active Choices Plugin
4 CVEs affecting Jenkins Project Jenkins Active Choices Plugin. Latest disclosed: 2021-11-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21699 | Medium | 5.4 | 2021-11-12 | Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference parameters, resulting in a stor… |
CVE-2020-2290 | Medium | 5.4 | 2020-10-08 | Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored… |
CVE-2020-2289 | Medium | 5.4 | 2020-10-08 | Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS) vu… |
CVE-2021-21616 | Medium | 4.6 | 2021-02-24 | Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability expl… |