Package · Maven

io.jenkins.plugins:teams-webhook-trigger

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Low 3.7

CVE-2023-46658

Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison

Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook …

Jenkins Project Jenkins MSTeams Webhook Trigger Plugin io.jenkins.plugins:teams-webhook-trigger Web / CMS Maven

Oct 25, 2023