Package · Maven

org.jenkins-ci.plugins:github-pr-coverage-status

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.5

CVE-2023-24442

Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin

Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with a…

Jenkins Project Jenkins GitHub Pull Request Coverage Status Plugin org.jenkins-ci.plugins:github-pr-coverage-status Web / CMS Maven

Jan 24, 2023