Lucene search
PRIOn knowledge basePRION:CVE-2022-43411HistoryOct 19, 2022 - 4:15 p.m.
Code injection
2022-10-1916:15:00
PRIOn knowledge base
www.prio-n.com
2
jenkins
gitlab
plugin
non-constant time comparison
webhook token
security vulnerability
code injection
0.001 Low
EPSS
Percentile
33.7%
Jenkins GitLab Plugin 1.5.35 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Related
osv
osv
CVE-2022-43411
2022-10-19 16:15:10
Non-constant time webhook token comparison in Jenkins GitLab Plugin
2022-10-19 19:00:22
github
github
Non-constant time webhook token comparison in Jenkins GitLab Plugin
2022-10-19 19:00:22
cve
cve
CVE-2022-43411
2022-10-19 16:15:10
nvd
nvd
CVE-2022-43411
2022-10-19 16:15:10
cvelist
cvelist
CVE-2022-43411
2022-10-19 00:00:00
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-10-19)
2023-03-03 00:00:00