5.9
Medium
CVE-2025-47888 Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for…
Description
Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins DingTalk Plugin 2.7 | earliest → 2.7.3 | No fix stated |