4.3 Medium

CVE-2023-50777 Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job…

Description

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins PaaSLane Estimate Plugin 1.0	earliest → 1.0.4	No fix stated

The 4 CVEs of Jenkins PaaSLane Estimate Plugin →

CVE-2023-50779 Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read… Not rated CVE-2023-50778 A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers… Not rated CVE-2023-50776 Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml… Not rated

Do you use Jenkins PaaSLane Estimate Plugin?

Track this CVE Watch Jenkins PaaSLane Estimate Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-50777

Timeline

Published December 13, 2023
Last modified May 22, 2025

References

Jenkins Security Advisory 2023-12-13 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-50777 Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job…

Description

Affected products and versions

Other CVEs of Jenkins PaaSLane Estimate Plugin