CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-23903

Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.4%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2024-23903

Jenkins » Github Branch Source » Version: 0.1

cpe:2.3:a:jenkins:github_branch_source:0.1
Jenkins » Github Branch Source » Version: 1.0

cpe:2.3:a:jenkins:github_branch_source:1.0
Jenkins » Github Branch Source » Version: 1.1

cpe:2.3:a:jenkins:github_branch_source:1.1
Jenkins » Github Branch Source » Version: 1.10

cpe:2.3:a:jenkins:github_branch_source:1.10
Jenkins » Github Branch Source » Version: 1.2

cpe:2.3:a:jenkins:github_branch_source:1.2
Jenkins » Github Branch Source » Version: 1.3

cpe:2.3:a:jenkins:github_branch_source:1.3
Jenkins » Github Branch Source » Version: 1.4

cpe:2.3:a:jenkins:github_branch_source:1.4
Jenkins » Github Branch Source » Version: 1.5

cpe:2.3:a:jenkins:github_branch_source:1.5
Jenkins » Github Branch Source » Version: 1.6

cpe:2.3:a:jenkins:github_branch_source:1.6
Jenkins » Github Branch Source » Version: 1.7

cpe:2.3:a:jenkins:github_branch_source:1.7
Jenkins » Github Branch Source » Version: 1.8

cpe:2.3:a:jenkins:github_branch_source:1.8
Jenkins » Github Branch Source » Version: 1.8.1

cpe:2.3:a:jenkins:github_branch_source:1.8.1
Jenkins » Github Branch Source » Version: 1.9

cpe:2.3:a:jenkins:github_branch_source:1.9
Jenkins » Github Branch Source » Version: 2.0.0

cpe:2.3:a:jenkins:github_branch_source:2.0.0
Jenkins » Github Branch Source » Version: 2.0.1

cpe:2.3:a:jenkins:github_branch_source:2.0.1
Jenkins » Github Branch Source » Version: 2.0.2

cpe:2.3:a:jenkins:github_branch_source:2.0.2
Jenkins » Github Branch Source » Version: 2.0.3

cpe:2.3:a:jenkins:github_branch_source:2.0.3
Jenkins » Github Branch Source » Version: 2.0.4

cpe:2.3:a:jenkins:github_branch_source:2.0.4
Jenkins » Github Branch Source » Version: 2.0.5

cpe:2.3:a:jenkins:github_branch_source:2.0.5
Jenkins » Github Branch Source » Version: 2.0.6

cpe:2.3:a:jenkins:github_branch_source:2.0.6
Jenkins » Github Branch Source » Version: 2.0.7

cpe:2.3:a:jenkins:github_branch_source:2.0.7
Jenkins » Github Branch Source » Version: 2.0.8

cpe:2.3:a:jenkins:github_branch_source:2.0.8
Jenkins » Github Branch Source » Version: 2.2.0

cpe:2.3:a:jenkins:github_branch_source:2.2.0
Jenkins » Github Branch Source » Version: 2.2.1

cpe:2.3:a:jenkins:github_branch_source:2.2.1
Jenkins » Github Branch Source » Version: 2.2.2

cpe:2.3:a:jenkins:github_branch_source:2.2.2
Jenkins » Github Branch Source » Version: 2.2.3

cpe:2.3:a:jenkins:github_branch_source:2.2.3
Jenkins » Github Branch Source » Version: 2.2.4

cpe:2.3:a:jenkins:github_branch_source:2.2.4
Jenkins » Github Branch Source » Version: 2.2.5

cpe:2.3:a:jenkins:github_branch_source:2.2.5
Jenkins » Github Branch Source » Version: 2.2.6

cpe:2.3:a:jenkins:github_branch_source:2.2.6
Jenkins » Github Branch Source » Version: 2.3.0

cpe:2.3:a:jenkins:github_branch_source:2.3.0
Jenkins » Github Branch Source » Version: 2.3.1

cpe:2.3:a:jenkins:github_branch_source:2.3.1
Jenkins » Github Branch Source » Version: 2.3.2

cpe:2.3:a:jenkins:github_branch_source:2.3.2
Jenkins » Github Branch Source » Version: 2.3.3

cpe:2.3:a:jenkins:github_branch_source:2.3.3
Jenkins » Github Branch Source » Version: 2.3.4

cpe:2.3:a:jenkins:github_branch_source:2.3.4
Jenkins » Github Branch Source » Version: 2.3.5

cpe:2.3:a:jenkins:github_branch_source:2.3.5
Jenkins » Github Branch Source » Version: 2.3.6

cpe:2.3:a:jenkins:github_branch_source:2.3.6
Jenkins » Github Branch Source » Version: 2.4.0

cpe:2.3:a:jenkins:github_branch_source:2.4.0
Jenkins » Github Branch Source » Version: 2.4.1

cpe:2.3:a:jenkins:github_branch_source:2.4.1
Jenkins » Github Branch Source » Version: 2.4.2

cpe:2.3:a:jenkins:github_branch_source:2.4.2
Jenkins » Github Branch Source » Version: 2.4.3

cpe:2.3:a:jenkins:github_branch_source:2.4.3
Jenkins » Github Branch Source » Version: 2.4.4

cpe:2.3:a:jenkins:github_branch_source:2.4.4
Jenkins » Github Branch Source » Version: 2.4.5

cpe:2.3:a:jenkins:github_branch_source:2.4.5
Jenkins » Github Branch Source » Version: 2.4.6

cpe:2.3:a:jenkins:github_branch_source:2.4.6
Jenkins » Github Branch Source » Version: 684.vea_fa_7c1e2fe3

cpe:2.3:a:jenkins:github_branch_source:684.vea_fa_7c1e2fe3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-23903

Products

Pricing

Contact Us