CVE-2025-53652 – Jenkins Git Parameter Plugin Unauthorized Parameter Injection Vulnerability

July 10, 2025

CVE ID : CVE-2025-53652

Published : July 9, 2025, 4:15 p.m. | 11 hours, 45 minutes ago

Description : Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.

Severity: 8.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-52357 – FiberHome FD602GW-DX-R410 Router Ping Diagnostic XSS

Next Article CVE-2025-44177 – White Star Software Protop Directory Traversal Vulnerability

Newest LF Decentralized Trust Lab HOPrS identifies if photos have been altered

Coder reimagines development environments to make them more ideal for AI agents

Report: AI coding productivity gains cancelled out by other friction points that slow developers down

15 Proven Benefits of Outsourcing Node.js Development for Large Organizations

How passkeys work: Do your favorite sites even support passkeys?

Samsung Galaxy Z Fold 7 vs. Z Fold 6: I tried both phones, and the difference is dramatic

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Cally – Small, feature-rich calendar components

Cally – Small, feature-rich calendar components

Working with the Command Line and WP-CLI

Access to Care Is Evolving: What Consumer Insights and Behavior Models Reveal

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

CVE-2025-53652 – Jenkins Git Parameter Plugin Unauthorized Parameter Injection Vulnerability

CVE-2025-3497 – Radiflow iSAP Smart Collector EOL Vulnerability

CVE-2025-3498 – Radiflow iSAP Smart Collector Unauthenticated Remote Command Execution and Configuration Modification

Week in review: Google fixes exploited Chrome zero-day, Patch Tuesday forecast

The Race to Cool the World’s Data

Gemini 2.0 is now available to everyone

Diabetes Detection System using PHP and MYSQL

The Complete Beginner’s Guide to Terminal/Command Prompt

Steam Deck OLED falls out of stock in US & Canada due to “supply chain constraints” presumably triggered by tariffs — but the price won’t increase

I got my hands on Lenovo’s new dual-screen OLED laptop — I can already see how the redesign makes it better than ever

NZXT’s latest PC case is the one I’ve been dreaming about, but it might not be right for you

CVE-2025-53652 – Jenkins Git Parameter Plugin Unauthorized Parameter Injection Vulnerability

Related Posts