Login Request a demo
JF
Product
Jenkins File Parameter Plugin
by Jenkins Project · last CVE Sep 2, 2026
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities2Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins File Parameter Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84671
8.8
1%
Sep 2
Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which…
Affected: through 425.v3fa_801681b_5e
CVE-2023-32986
8.8
61%
May 16
Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with…
Affected: through 285.v757c5b_67a_c25
Showing 2