GHSA-ggmx-pq89-7mcr
GitHub Security Advisory
Plaintext Storage of a Password in Jenkins Configuration as Code Plugin
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Jenkins Configuration as Code Plugin prior to version 1.25 did not treat the proxy password as a secret to be masked when logging or encrypted for export.
Affected Packages
Maven
io.jenkins:configuration-as-code
Affected versions:
0
(fixed in 1.25)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 2, 2025 6:26 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.