Loading HuntDB...

GHSA-r69h-6c4g-63xf

GitHub Security Advisory

Cleartext Transmission of Sensitive Information in Jenkins Configuration as Code Plugin

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form.

Affected Packages

Maven io.jenkins:configuration-as-code
Affected versions: 0 (fixed in 1.25)

Related CVEs

Key Information

GHSA ID
GHSA-r69h-6c4g-63xf
Published
May 24, 2022 4:51 PM
Last Modified
June 28, 2022 10:37 PM
CVSS Score
5.0 /10
Primary Ecosystem
Maven
Primary Package
io.jenkins:configuration-as-code
GitHub Reviewed
✓ Yes

Dataset

Last updated: August 24, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.