CVE-2025-64133: Jenkins Extensible Choice Parameter

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackers to execute sandboxed Groovy code.

Affected products

• Jenkins Extensible Choice Parameter: up to and including 239.v5f5c278708cf

Published 2025-10-29. Last modified 2026-10-08.