CVE-2022-34187

CVE-2022-34187 affects Jenkins Filesystem List Parameter Plugin, version 0.0.7 and earlier. It is a stored cross-site scripting (XSS) vulnerability in the name/description of File system objects list parameters on parameter-enabled views, exploitable by attackers with Item/Configure permission. M...

CVE-2024-54004

The Jenkins Filesystem List Parameter Plugin versions 0.0.14 and earlier are vulnerable to a path traversal vulnerability. The root cause is an unrestricted path used for the File system objects list Parameter , which allows an attacker with Item/Configure permissions to enumerate file names on t...