Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2118 · ADVISORY
• jenkinsci/pipeline-githubnotify-step-plugin · PACKAGE
• jenkins.io/security/advisory/2020-02-12 · WEB
• openwall.com/lists/oss-security/2020/02/12/3 · WEB
• jenkins.io/security/advisory/2020-02-12

Lỗ hổng khác của org.jenkins-ci.plugins:pipeline-build-step

• CVE-2023-25762TRUNG BÌNH 5.4Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Gener…
• CVE-2022-25184TRUNG BÌNH 6.5Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the P…
• CVE-2017-1000089TRUNG BÌNH 5.3Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in …