Git Parameter
1 CVEs
product
Monthly
Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.
Code Injection
Jenkins
Git Parameter
NVD
GitHub
CVSS 3.1
8.2
EPSS
0.0%
CVE-2025-53652
EPSS 0%
CVSS 8.2
HIGH
PATCH
This Week
Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.
Code Injection
Jenkins
Git Parameter
NVD
GitHub