Executive brief
Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin
Affected products
- Maven org.jenkins-ci.plugins:generic-webhook-trigger
Junglewise Threat Intelligence
CVE-2022-43412: Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin
CVE-2022-43412 · Severity: low · CVSS 3.1 · Published 2022-10-19
Technologies: org.jenkins-ci.plugins:generic-webhook-trigger (Maven). Vendors: Maven.