CVE-2023-39152

Always-Incorrect Control Flow Implementation in maven/org.jenkins-ci.plugins/gradle

Identifiers

GHSA-pvjf-4hfg-wr84, CVE-2023-39152

Package Slug

maven/org.jenkins-ci.plugins/gradle

Vulnerability

Always-Incorrect Control Flow Implementation

Description

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.

Affected Versions

All versions up to 2.8

Solution

Upgrade to version 2.8.1 or above.

Last Modified

2024-01-31

source