Cross-site Request Forgery (CSRF) Affecting jp.ikedam.jenkins.plugins:extensible-choice-parameter package, versions [0,]
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Cross-site Request Forgery (CSRF) vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-JAVA-JPIKEDAMJENKINSPLUGINS-13775577
- published30 Oct 2025
- disclosed29 Oct 2025
- creditLotfi Yahi
Introduced: 29 Oct 2025
NewCVE-2025-64133 (opens in a new tab)How to fix?
There is no fixed version for jp.ikedam.jenkins.plugins:extensible-choice-parameter.
Overview
jp.ikedam.jenkins.plugins:extensible-choice-parameter is a This plugin adds "Extensible Choice" as a build parameter.You can select how to retrieve choices, including the way to share choices among all jobs.
Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) via the HTTP endpoint due to missing POST request enforcement. An attacker can execute sandboxed Groovy code by tricking a user into visiting a malicious website.