Jenkins Project Jenkins Filesystem List Parameter Plugin

• CVE-2024-54004 Medium 4.3 Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate f 0.8%
• CVE-2022-34187 Unrated Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-s 0.8%