VULNERABILITY INTELLIGENCE

CVE-2023-50773

CVSS score4.3 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2023-12-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Weakness classification

  • nvd@nist.gov: CWE-312

Primary references