GHSA-862j-cv9p-6hpf, CVE-2019-10381
maven/org.jenkins-ci.plugins/codefresh
Improper Certificate Validation
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
All versions up to 1.8
Unfortunately, there is no solution available yet.
2023-03-06
source |