Package · Maven

io.jenkins.plugins:custom-checkbox-parameter

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.4

CVE-2022-43425

Stored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin

Jenkins Custom Checkbox Parameter Plugin 1.4 and earlier does not escape the name and description of Custom Checkbox Parameter parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers w…

Jenkins Project Jenkins Custom Checkbox Parameter Plugin io.jenkins.plugins:custom-checkbox-parameter Web / CMS Maven

Oct 19, 2022
High 8.0

CVE-2022-25189

Stored Cross-site Scripting vulnerability in Jenkins Custom Checkbox Parameter Plugin

Jenkins Custom Checkbox Parameter Plugin 1.1 and earlier does not escape parameter names of custom checkbox parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Custom Checkbox Parameter Plugin io.jenkins.plugins:custom-checkbox-parameter Web / CMS Maven

Feb 15, 2022