CVE-2023-50773

2023-12-1317:30:19

jenkins

www.cve.org

jenkins

dingding json pusher

access token

vulnerability

configuration form

attackers

observe

capture

AI Score

5.3

Confidence

High

EPSS

Percentile

13.3%

JSON

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CNA Affected

[
  {
    "vendor": "Jenkins Project",
    "product": "Jenkins Dingding JSON Pusher Plugin",
    "versions": [
      {
        "version": "0",
        "versionType": "maven",
        "lessThanOrEqual": "2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]