CVE-2023-46651

—

CVSS 3.1

6.5 medium

EPSS

<1%p47

Published

Oct 25, 2023 (Oct 25, 2023)

Modified

Jun 17, 2026

Description

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.

Vendors: jenkins
Products: warnings
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.