CVE-2023-50773 describes a vulnerability in the Jenkins Dingding JSON Pusher Plugin versions 2.0 and earlier, where access tokens are not masked on the job configuration form. This flaw allows authenticated attackers to easily observe and potentially capture sensitive tokens. Rated Medium severity (CVSS 4.3), the vulnerability has a low impact on confidentiality and requires low privileges, with no known active exploitation, public exploit code, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0CPE matchmatch criteria | cpe:2.3:a:jenkins:dingding_json_pusher:*:*:*:*:*:jenkins:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.