Jenkins MQ Notifier Plugin exposes sensitive information in build logs

MÉDIO 6.5CVE-2024-28154 · GHSA-8fm4-r23p-v68v · Published 06/03/2024 · updated 17/06/2026

Em resumo

CVE-2024-28154 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta com.sonymobile.jenkins.plugins.mq:mq-notifier, mq notifier (jenkins).
Chance de exploração nos próximos 30 dias (EPSS): 0.68%, maior que 52.4% das vulnerabilidades.
Correção: atualize para 1.4.1 ou posterior.

Package	Affected versions	Patched versions
com.sonymobile.jenkins.plugins.mq:mq-notifier Maven	`< 1.4.1`	`1.4.1`
mq notifier jenkins	`< 1.4.1`	`1.4.1`

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.

NVD description

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.