igalg.jenkins.plugins:multibranch-scan-webhook-trigger

1 result · Feed

• Low 3.7
  CVE-2023-46656

  Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison

  Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid…

  Jenkins Project Jenkins Multibranch Scan Webhook Trigger Plugin igalg.jenkins.plugins:multibranch-scan-webhook-trigger Web / CMS Maven
  Oct 25, 2023