Lucene search

K

Jenkins Dingding JSON Pusher Plugin Security Vulnerabilities

cve
cve

CVE-2023-50773

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture...

4.3CVSS

7.3AI Score

0.0004EPSS

2023-12-13 06:15 PM
7
cve
cve

CVE-2023-50772

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

4.3CVSS

7.2AI Score

0.0004EPSS

2023-12-13 06:15 PM
8