Description
Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins SQLPlus Script Runner Plugin | unspecified – ≤ 2.0.12 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:sqlplus-script-runner | < 2.0.13 | 2.0.13 | GHSA-rwh3-5g7v-3c5m |