CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-50773

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.8%

CVSS Severity

CVSS v3 Score 4.3

References

http://www.openwall.com/lists/oss-security/2023/12/13/4
https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3184
http://www.openwall.com/lists/oss-security/2023/12/13/4
https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3184

Products affected by CVE-2023-50773

Jenkins » Dingding Json Pusher » Version: N/A

cpe:2.3:a:jenkins:dingding_json_pusher:-
Jenkins » Dingding Json Pusher » Version: 1.0

cpe:2.3:a:jenkins:dingding_json_pusher:1.0
Jenkins » Dingding Json Pusher » Version: 1.1

cpe:2.3:a:jenkins:dingding_json_pusher:1.1
Jenkins » Dingding Json Pusher » Version: 1.2

cpe:2.3:a:jenkins:dingding_json_pusher:1.2
Jenkins » Dingding Json Pusher » Version: 2.0

cpe:2.3:a:jenkins:dingding_json_pusher:2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-50773

Products

Pricing

Contact Us