5 matches found
CVE-2025-47888
Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...
CVE-2025-47888
creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whvzkn2j...
CVE-2025-47888
Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...
CVE-2025-47888
The Jenkins DingTalk Plugin (versions 2.7.3 and earlier ) is vulnerable to a security flaw where it unconditionally disables SSL/TLS certificate and hostname validation for connections to configured DingTalk webhooks. This behavior potentially exposes connections to man-in-the-middle (MitM) attac...
