CVE-2023-50773

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers…

published December 13, 2023

CVSS
—
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.0th percentile
Published
2023-12-13T17:30Z
EPSS history
Timeline
  • 13 DEC 17:30Z
    Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers…
    cvelistv5