We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.
Reserved 2025-07-08 | Published 2025-07-09 | Updated 2025-07-09 | Assigner jenkinswww.jenkins.io/security/advisory/2025-07-09/ (Jenkins Security Advisory 2025-07-09)
Support options
