CVE-2022-27203

CVE-2022-27203: vulnerability in Jenkins Extended Choice Parameter Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Extended Choice Parameter Plugin+ Monitor org.jenkins-ci.plugins:extended-choice-parameter

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller.
Affected products
Jenkins project · Jenkins Extended Choice Parameter Plugin
Related CVEs — Jenkins Extended Choice Parameter Plugin

In the same product, most dangerous first.

CVE-2022-27205—CVE-2022-27205EPSS 0.8%CVE-2022-29038—CVE-2022-29038EPSS 0.7%CVE-2022-27202—CVE-2022-27202EPSS 0.7%CVE-2022-27204—CVE-2022-27204EPSS 0.6%