Executive brief
Jenkins Gogs Plugin uses non-constant time webhook token comparison
Affected products
- Maven org.jenkins-ci.plugins:gogs-webhook
Junglewise Threat Intelligence
CVE-2023-46657: Jenkins Gogs Plugin uses non-constant time webhook token comparison
CVE-2023-46657 · Severity: low · CVSS 3.1 · Published 2023-10-25
Technologies: org.jenkins-ci.plugins:gogs-webhook (Maven). Vendors: Maven.