Non-constant time webhook token hash comparison in Jenkins Zanata Plugin

Jenkins Zanata Plugin 0.6 and earlier does not use a constant-time comparison when checking whether the provided and expected webhook token hashes are equal. This could potentially allow attackers to use statistical methods to obtain a valid webhook token. As of publication of this advisory, ther...

CVE-2021-28417

creationtimestamp| type| source ---|---|--- 2021-03-18 15:32:05+00:00| seen| https://t.me/cibsecurity/25088...