Miggo Logo
Miggo Vulnerability Database
→
CVE-2025-64133

CVE-2025-64133: Jenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgery

5.4

CVSS Score
3.1

Basic Information

CVE ID
CVE-2025-64133
GHSA ID
GHSA-3jw2-5hjg-hc2c
EPSS Score
-
CWE
CWE-352
Published
10/29/2025
Updated
10/29/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Package NameEcosystemVulnerable VersionsFirst Patched Version
jp.ikedam.jenkins.plugins:extensible-choice-parametermaven<= 239.v5f5c278708cf

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

J*nkins *xt*nsi*l* **oi** P*r*m*t*r Plu*in ***.v************ *n* **rli*r *o*s not r*quir* POST r*qu*sts *or *n *TTP *n*point, r*sultin* in * *ross-sit* r*qu*st *or**ry (*SR*) vuln*r**ility. T*is vuln*r**ility *llows *tt**k*rs to *x**ut* s*n**ox** *r

Reasoning

No *n*lysis *v*il**l*