Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-46658
HistoryOct 25, 2023 - 6:17 p.m.

Code injection

2023-10-2518:17:00
PRIOn knowledge base
www.prio-n.com
3
code injection
jenkins
msteams
webhook
token comparison

0.0005 Low

EPSS

Percentile

17.0%

Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.

0.0005 Low

EPSS

Percentile

17.0%

Related for PRION:CVE-2023-46658