Jenkins Filesystem List Parameter vulnerabilities

2 CVEs affecting Jenkins Filesystem List Parameter, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-54004, published 2024-11-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-54004, published 2024-11-27. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate…
CVE-2022-34187, published 2022-06-23. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored…