CVE-2025-53652

highpriority · track · 10EPSS 0.007 · 52 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.67% (52nd) EPSS

CVSS 8.2 · high

Is it mine?

5 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-28

Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.

cvss

Technical severity, 0–10. One row per scoring source.

8.2

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.4–8.2

v3.18.2highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Nsecondary · ENISA EU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Nsecondaryexploitability 3.9 · impact 4.2

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Nsecondary · OSV

v3.17.8highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1287USCWE-20USCWE-20USCWE-20US

exploits (1)

Public proof-of-concept and weaponised exploit code.

pl4tyz/CVE-2025-53652-Jenkins-Git-Parameter-AnalysisCVE-2025-53652: Jenkins Git Parameter AnalysisPoC · poc_in_github

affected products (5)

Products and version ranges known to be affected.

Jenkins Jenkins Pluginsall versionscert_bundDEcpe:/a:cloudbees:jenkins:plugins
Jenkins Project Jenkins Git Parameter Plugin≤ 0 ≤439.vb_0e46ca_14534enisa_euvdEU
CD Foundation Git Parameter≤ 439.vb_0e46ca_14534fstec_bduRU
jenkins git parameter< 444.vca_b_84d3703c2nvdUScpe:2.3:a:jenkins:git_parameter:*:*:*:*:*:*:*:*
Maven org.jenkins-ci.tools:git-parameter< 444.vcaosvUSpkg:maven/org.jenkins-ci.tools/git-parameter

advisories (2)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-1521Jenkins Plugins: Mehrere SchwachstellenDeutsch2025-07-09csaf · cert_bundDE
Ein entfernter Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.
GHSA-qcj2-99cg-mppfJenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check2025-07-09ghsa · osvUS
Jenkins Git Parameter Plugin implements a choice build parameter that lists the configured Git SCM’s branches, tags, pull requests, and revisions. Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices. This allows attackers with Item/Build permission to inject arbitrary values into Git parameters. Git Parameter Plugin 444.vca_b_84d3703c2 validates that the Git parameter value submitted to the build matches one of the offered choices.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund nvd osv NVD CVE.org MITRE

published 2025-07-09modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan