Jenkins Git Parameter Plugin

2 results · Clear filters · Feed

• High 8.2
  CVE-2025-53652 Public exploit

  Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check

  Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.

  Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  Jul 9, 2025
• High 8.0
  CVE-2020-2238

  Stored XSS vulnerability in Jenkins Git Parameter Plugin

  Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

  Jenkins Project Jenkins Git Parameter Plugin org.jenkins-ci.tools:git-parameter Web / CMS Maven
  Sep 1, 2020