CVE-2025-64133

A cross-site request forgery (CSRF) vulnerability exists in the Jenkins Extensible Choice Parameter Plugin version 239.v5f5c278708cf and earlier . The root cause is that the plugin does not require POST requests for certain HTTP endpoints, which allows an attacker to trick a user's browser into e...