Executive brief
Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability
Affected products
- Maven org.jenkins-ci.plugins:ghprb
Junglewise Threat Intelligence
CVE-2018-1000186: Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability
CVE-2018-1000186 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: org.jenkins-ci.plugins:ghprb (Maven). Vendors: Maven.
Related threats
- Missing permission checks in Jenkins GitHub Pull Request Builder Plugin
- Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
- CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
- Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
- Jenkins GitHub Pull Request Builder Plugin