Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-50772

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wjr6-v4c7-8cv6

Tokens stored in plain text by Dingding JSON Pusher Plugin Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

gitlab/maven/com.zintow/dingding-json-pusher/CVE-2023-50772

Tokens stored in plain text by Dingding JSON Pusher Plugin Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.