CVE-2017-1000386

Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page through the 'Active Choices Reactive Reference Parameter' type. This could include, for example, arbitrary JavaScript. Acti...

PT-2018-5168

Name of the Vulnerable Software and Affected Versions Jenkins Active Choices plugin versions 1.5.3 and earlier Description The issue allows users with Job/Configure permission to insert arbitrary HTML, including JavaScript, into the 'Build With Parameters' page through the 'Active Choices Reactiv...

CVE-2017-1000386: Improper Neutralization of Input During Web Page Generation

Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the 'Build With Parameters' page through the 'Active Choices Reactive Reference Parameter' type. This could include, for example, arbitrary JavaScript. Acti...