Credential Exposure

Overview org.jenkins-ci.plugins:fitnesse is a Jenkins fitnesse plugin. Affected versions of this package are vulnerable to Credential Exposure due to a job in that store passwords unencrypted. These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins...

Jenkins FitNesse Plugin stores passwords unencrypted

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication of thi...

GHSA-J4PH-WP3C-C37W Jenkins FitNesse Plugin stores passwords unencrypted

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication of thi...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2026-57302

The Jenkins FitNesse Plugin (version 1.36 and earlier ) stores passwords unencrypted within the job config.xml files on the Jenkins controller. This vulnerability allows users with Extended Read permissions or any individual with direct access to the Jenkins controller file system to view these p...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2026-57302

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2026-57302: Plaintext Storage of a Password

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

PT-2026-51812

Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system...

CVE-2020-2120

Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity XXE attacks...

io.orangebeard:fitnesse-toolchain-listener (3.0.1), net.lepshi.fitnesse.multitables:multitables-fitnesse-plugin (>=1.0.3, <=1.0.4) +1 more potentially affected by CVE-2024-42499 via org.fitnesse:fitnesse (20240219)

org.fitnesse:fitnesse MAVEN version 20240219 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - io.orangebeard:fitnesse-toolchain-listener 3.0.1 - net.lepshi.fitnesse.multitables:multitables-fitnesse-plugin...

nl.hsac:hsac-fitnesse-plugin (1.32.11), nl.praegus:toolchain-playwright-fixture (>=1.7.0, <=1.7.13) potentially affected by CVE-2024-42499 via org.fitnesse:fitnesse (20230503)

org.fitnesse:fitnesse MAVEN version 20230503 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.hsac:hsac-fitnesse-plugin 1.32.11 - nl.praegus:toolchain-playwright-fixture =1.7.0, =1.7.13 Source cves:...

nl.hsac:hsac-fitnesse-fixtures (>=5.2.0, <=5.2.12), nl.hsac:hsac-fitnesse-plugin (>=1.32.0, <=1.32.9) potentially affected by CVE-2024-42499 via org.fitnesse:fitnesse (20220319)

org.fitnesse:fitnesse MAVEN version 20220319 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.hsac:hsac-fitnesse-fixtures =5.2.0, =1.32.0, =1.32.9 Source cves: CVE-2024-42499 Source advisory:...

nl.hsac:hsac-fitnesse-fixtures (>=4.29.0, <=4.30.0), nl.hsac:hsac-fitnesse-plugin (1.31.0) potentially affected by CVE-2024-39610 via org.fitnesse:fitnesse (20211006)

org.fitnesse:fitnesse MAVEN version 20211006 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.hsac:hsac-fitnesse-fixtures =4.29.0, =4.30.0 - nl.hsac:hsac-fitnesse-plugin 1.31.0 Source cves: CVE-2024-39610...

net.lepshi.fitnesse.multitables:multitables-fitnesse-plugin (1.0.1), nl.hsac:hsac-fitnesse-pdf (0.0.5) potentially affected by CVE-2024-39610 via org.fitnesse:fitnesse (20190202)

org.fitnesse:fitnesse MAVEN version 20190202 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - net.lepshi.fitnesse.multitables:multitables-fitnesse-plugin 1.0.1 - nl.hsac:hsac-fitnesse-pdf 0.0.5 Source cves:...

io.github.eireglas:givwenzen (>=2.0, <=2.0.1), nl.hsac:hsac-fitnesse-fixtures (>=5.2.24, <=5.2.35) +3 more potentially affected by CVE-2024-42499 via org.fitnesse:fitnesse (20221219)

org.fitnesse:fitnesse MAVEN version 20221219 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - io.github.eireglas:givwenzen =2.0, =5.2.24, =2.0.15, =1.0, =1.6.6 Source cves: CVE-2024-42499 Source advisory:...

nl.hsac:hsac-fitnesse-fixtures (4.4.0), nl.hsac:hsac-fitnesse-plugin (1.27) potentially affected by CVE-2024-39610 via org.fitnesse:fitnesse (20190417)

org.fitnesse:fitnesse MAVEN version 20190417 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.hsac:hsac-fitnesse-fixtures 4.4.0 - nl.hsac:hsac-fitnesse-plugin 1.27 Source cves: CVE-2024-39610 Source...