Credential Exposure Affecting org.jenkins-ci.plugins:view-cloner package, versions [0,]


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.07% (31st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-JAVA-ORGJENKINSCIPLUGINS-3252241
  • published28 Jan 2023
  • disclosed28 Jan 2023
  • creditValdes Che Zogou (CloudBees)

Introduced: 28 Jan 2023

CVE-2023-24450  (opens in a new tab)
CWE-256  (opens in a new tab)

How to fix?

There is no fixed version for org.jenkins-ci.plugins:view-cloner.

Overview

org.jenkins-ci.plugins:view-cloner is a plugin for copying and changing views in bulk

Affected versions of this package are vulnerable to Credential Exposure in job config.xml files, visible by users with Extended Read permission.

CVSS Scores

version 3.1