CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask i.e., replace with asterisks usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked...

CVE-2023-41934

CVE-2023-41934 affects Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier. The root cause is improper masking of usernames for credentials defined in custom Maven settings, causing them to appear in Pipeline build logs when “Treat username as secret” is enabled. Documented i...