Jenkins Dingding JSON Pusher Plugin... CVE-2023-50772
-
AV
AC
AU
C
I
A
发布：
2023-12-13
修订：
2023-12-18
Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
