Jenkins

Eiffel Broadcaster

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-24400

  • EPSS 0.05%
  • Published 22.01.2025 17:15:13
  • Last modified 03.10.2025 00:16:56

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials ...