Jenkins Project Jenkins GitHub Pull Request Coverage Status Plugin vulnerabilities

Latest Jenkins Project Jenkins GitHub Pull Request Coverage Status Plugin CVEs

Newest publication first

1. CVE-2023-24442 Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin

   Published 2023-01-24

   Medium·CVSS 5.5 EPSS 0.23%

   Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.