https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 10:59:47 +0000 https://vulnerability.circl.lu/vuln/cnvd-2018-02832 cnvd-2018-02832 https://vulnerability.circl.lu/vuln/cnvd-2018-02832 https://vulnerability.circl.lu/vuln/fkie_cve-2017-1000386 <p>Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the &#39;Build With Parameters&#39; page through the &#39;Active Choices Reactive Reference Parameter&#39; type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the &#39;Build With Parameters&#39; page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.</p> <p>Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the &#39;Build With Parameters&#39; page through the &#39;Active Choices Reactive Reference Parameter&#39; type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the &#39;Build With Parameters&#39; page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2017-1000386 https://vulnerability.circl.lu/vuln/ghsa-c2hw-w9qm-q5r9 <p><strong>Affected:</strong> Maven: org.biouno:uno-choice</p> <p>Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the &#39;Build With Parameters&#39; page through the &#39;Active Choices Reactive Reference Parameter&#39; type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the &#39;Build With Parameters&#39; page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.</p> <p><strong>Affected:</strong> Maven: org.biouno:uno-choice</p> <p>Jenkins Active Choices plugin version 1.5.3 and earlier allowed users with Job/Configure permission to provide arbitrary HTML to be shown on the &#39;Build With Parameters&#39; page through the &#39;Active Choices Reactive Reference Parameter&#39; type. This could include, for example, arbitrary JavaScript. Active Choices now sanitizes the HTML inserted on the &#39;Build With Parameters&#39; page if and only if the script is executed in a sandbox. As unsandboxed scripts are subject to administrator approval, it is up to the administrator to allow or disallow problematic script output.</p> https://vulnerability.circl.lu/vuln/ghsa-c2hw-w9qm-q5r9 https://vulnerability.circl.lu/vuln/gsd-2017-1000386 gsd-2017-1000386 https://vulnerability.circl.lu/vuln/gsd-2017-1000386