org.jenkins-ci.plugins:build-with-parameters

2 results · Feed

• High 8.8
  CVE-2021-21629

  CSRF vulnerability in Jenkins Build With Parameters Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters.

  Jenkins Project Jenkins Build With Parameters Plugin org.jenkins-ci.plugins:build-with-parameters Web / CMS Maven
  Mar 30, 2021
• Medium 5.4
  CVE-2021-21628 EPSS 79%

  Stored XSS vulnerability in Jenkins Build With Parameters Plugin

  Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

  Jenkins Project Jenkins Build With Parameters Plugin org.jenkins-ci.plugins:build-with-parameters Web / CMS Maven
  Mar 30, 2021