CVE-2025-64133

Publication date

2025-10-29 13:29:41

Family

jenkins

State

PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackers to execute sandboxed Groovy code.