[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-53652":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":23,"technologies":25,"references":27,"score":32,"epss_score":33,"epss_percentile":34,"is_kev":35,"cisa_kev_date_added":36,"cisa_kev_due_date":36,"cisa_ssvc":37,"attack_mappings":47,"exploits":54},76472,"CVE-2025-53652","EUVD-2025-20862","Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check\n\nJenkins Git Parameter Plugin implements a choice build parameter that lists the configured Git SCM’s branches, tags, pull requests, and revisions.\n\nGit Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices.\n\nThis allows attackers with Item\u002FBuild permission to inject arbitrary values into Git parameters.\n\nGit Parameter Plugin 444.vca_b_84d3703c2 validates that the Git parameter value submitted to the build matches one of the offered choices.","2025-07-09T18:30:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":17,"confidentialityImpact":17},"UNCHANGED","3.1",5.4,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","LOW","NONE",true,[21,22],"CWE-20","CWE-1287",[24],"cpe:2.3:a:jenkins:git_parameter:*:*:*:*:*:jenkins:*:*",[26],"Jenkins Git Parameter",[28,29,30,31],"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2025-07-09\u002F#SECURITY-3419","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F07\u002F09\u002F4","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53652","https:\u002F\u002Fgithub.com\u002Fjenkinsci\u002Fgit-parameter-plugin",0.47,0.00673,0.51822,false,null,{"timestamp":38,"automatable":39,"tech_impact":40,"exploitation":41,"cisa_decision":42,"cisa_remediation_timeline":46},"2025-07-09T18:50:57.266261Z","yes","partial","none",{"vector":43,"decision":44,"priority":45},"CISAv1\u002FE:N\u002FA:Y\u002FT:P\u002FM:H\u002F2026-10-25T16:13:50.926469\u002F","attend","medium","14D",[48],{"name":49,"source":50,"tactics":51,"technique_id":53},"Exploit Public-Facing Application","attack_vector",[52],"initial-access","T1190",[]]