Junglewise Threat Intelligence

CVE-2023-41936: Jenkins Google Login Plugin non-constant time token comparison

CVE-2023-41936 · Severity: low · CVSS 3.1 · Published 2023-09-06

Technologies: org.jenkins-ci.plugins:google-login (Maven). Vendors: Maven.

Executive brief

Jenkins Google Login Plugin non-constant time token comparison

Affected products

  • Maven org.jenkins-ci.plugins:google-login

Related threats