Executive brief
Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
Affected products
- Maven org.jenkins-ci.plugins:pipeline-maven
Junglewise Threat Intelligence
CVE-2023-41934: Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
CVE-2023-41934 · Severity: low · CVSS 3.1 · Published 2023-09-06
Technologies: org.jenkins-ci.plugins:pipeline-maven (Maven). Vendors: Maven.
Related threats
- XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
- Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
- CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials