GHSA-ffj8-w4rj-vr7v, CVE-2019-1003045
maven/de.eacg/ecs-publisher
Insufficiently Protected Credentials
A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.
All versions up to 1.0.0
Upgrade to version 1.0.1 or above.
2024-01-31
source |