1 matches found
Token stored in plain text by telegram-notifications
telegram-notifications 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file jenkinsci.plugins.telegrambot.TelegramBotGlobalConfiguration.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with access to the Jenkins...
3.3CVSS6.4AI score0.0052EPSS
SaveExploits0Affected Software1
20