CVE-2023-39152

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.

Score

CVSS 3.1 6.5 Medium

Status

Modified - jenkinsci-cert@googlegroups.com

Published

2023-07-26

Last modified

2024-10-23

Weaknesses

CWE-670

Affected products

• Gradle (Jenkins)
• Jenkins Gradle Plugin (Jenkins Project)

References

• http://www.openwall.com/lists/oss-security/2023/07/26/2
• https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3208