https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:10:50 +0000 https://vulnerability.circl.lu/vuln/cve-2017-1000386 <p>Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the &#39;Build With Parameters&#39; page through the &#39;Active Choices Reactive Reference Parameter&#39; type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the &#39;Build With Parameters&#39; page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.</p> <p>Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the &#39;Build With Parameters&#39; page through the &#39;Active Choices Reactive Reference Parameter&#39; type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the &#39;Build With Parameters&#39; page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.</p> https://vulnerability.circl.lu/vuln/cve-2017-1000386