Displayed in plain text by Dingding JSON Pusher Plugin

MITTEL 4.3CVE-2023-50773 · GHSA-q5cj-xf99-79m8 · Published 13/12/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-50773 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in com.zintow:dingding-json-pusher, dingding json pusher (jenkins).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.35%, höher als bei 28.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
com.zintow:dingding-json-pusher Maven	`≤ 2.0`	No fix yet
dingding json pusher jenkins	`≤ 2.0`	No fix yet

Description

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

NVD description

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

References

nvd.nist.gov/vuln/detail/CVE-2023-50773 · ADVISORY
jenkins.io/security/advisory/2023-12-13 · WEB
openwall.com/lists/oss-security/2023/12/13/4 · WEB

Weitere Schwachstellen in com.zintow:dingding-json-pusher

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free