Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Dingding JSON Pusher Plugin — Jenkins Security Advisory 2023-12-13 Clear all filters
TI-2023-27702 CVE-2023-50772 · GHSA-wjr6-v4c7-8cv6

Cleartext storage of sensitive information in Jenkins Dingding JSON Pusher Plugin

Priority LOW 20

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00347 Published 2023-12-13 No fix listed CWE-312