CVE-2025-47888

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

CVE-2025-47888

creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whvzkn2j...

CVE-2025-47888

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

CVE-2025-47888

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

CVE-2025-47888

The Jenkins DingTalk Plugin (versions 2.7.3 and earlier ) is vulnerable to Improper Input Validation because it unconditionally disables SSL/TLS certificate and hostname validation for connections to configured DingTalk webhooks. This flaw allows an attacker to intercept and manipulate secure com...