5.4 Medium

CVE-2025-64133 A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackers to execute sandboxed Groovy code.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Extensible Choice Parameter Plugin 239	earliest → 239.v5f5c278708cf	No fix stated

Do you use Jenkins Extensible Choice Parameter Plugin?

Track this CVE Watch Jenkins Extensible Choice Parameter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2025-64133

Timeline

Published October 29, 2025
Last modified November 4, 2025

References

Jenkins Security Advisory 2025-10-29 www.jenkins.io

Track this CVE