Dingding Json Pusher (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2023-12-13. Vendor: Jenkins.

CVEs of Dingding Json Pusher

• CVE-2023-50773 - CVSS 4.3 (medium), 2023-12-13: Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for…
• CVE-2023-50772 - CVSS 4.3 (medium), 2023-12-13: Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be…