Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.biouno:uno-choice

5 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5
Registry
Maven Central

Advisories 5

  • Jenkins Active Choices Plugin 2.5.6 and earlier does not escape the parameter name of reactive parameters and dynamic reference…

    Affected: fixed in 2.5.7.

  • Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting…

    Affected: fixed in 2.5.3.

  • Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters…

    Affected: fixed in 2.5.

  • Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored…

    Affected: fixed in 2.5.

  • Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown…

    Affected: fixed in 2.0.