Threats tagged 'ghsa-qcj2-99cg-mppf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.7%	CVE-2025-53652Org.jenkins ci.tools:git parameter: Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive High8.2EPSS 0.7%2025-07-09GCVE DatabaseCVE-2025-53652 The Jenkins Git Parameter Plugin versions prior to 444.vca contain a vulnerability where the plugin does not validate that the Git parameter value submitted to a build matches one of the predefined choices. This flaw allows attackers with Item/Build permission to inject arbitrary values into Git parameters, potentially leading to code injection. The issue is fixed in version 444.vca. EPSS 0.7%Report on CVE-2025-53652 Vulnerability CWE-1287 #ghsa-qcj2-99cg-mppf #maven	GCVE Database	2025-07-09

Page 1 of 1