Junglewise Threat Intelligence

CVE-2024-23903: Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin

CVE-2024-23903 · Severity: low · CVSS 3.1 · Published 2024-01-24

Technologies: io.jenkins.plugins:gitlab-branch-source (Maven). Vendors: Maven.

Executive brief

Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin

Affected products

  • Maven io.jenkins.plugins:gitlab-branch-source

Related threats