Description
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Affected products
- Jenkins Project / Jenkins Extended Choice Parameter Pluginunspecified – 346.vd87693c5a_86c
- Jenkins Project / Jenkins Extended Choice Parameter Pluginnext of 346.vd87693c5a_86c – unspecified