Jenkins Dingding Json Pusher Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-12-13. Vendor: Jenkins Project.

CVEs of Jenkins Dingding Json Pusher Plugin

• CVE-2023-50773 - CVSS 4.3 (medium), 2023-12-13: Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for…
• CVE-2023-50772 - CVSS 4.3 (medium), 2023-12-13: Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where they can be…