Jenkins Build With Parameters vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Build With Parameters, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2021-21628jenkins projectjenkins build with parameters plugin+2
EPSS score
81.43%
Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.8.8CVE-2021-21629jenkins projectjenkins build with parameters plugin+2
EPSS score
0.76%
A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters.