Executive brief
Jenkins GitHub plugin uses weak webhook signature function
Affected products
- Maven com.coravy.hudson.plugins.github:github
Junglewise Threat Intelligence
CVE-2022-36885: Jenkins GitHub plugin uses weak webhook signature function
CVE-2022-36885 · Severity: low · CVSS 3.1 · Published 2022-07-28
Technologies: com.coravy.hudson.plugins.github:github (Maven). Vendors: Maven.
Related threats
- Jenkins GitHub Plugin stored XSS in job URL validation
- Stored XSS vulnerability in Jenkins GitHub Plugin
- Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
- Jenkins GitHub Plugin server-side request forgery vulnerability exists
- CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials