Description
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.
Remediation
References
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-262
Related Vulnerabilities
CVE-2023-29528 Vulnerability in maven package org.xwiki.commons:xwiki-commons-xml
CVE-2017-1000242 Vulnerability in maven package org.jenkins-ci.plugins:git-client
CVE-2023-2585 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2019-10412 Vulnerability in maven package com.inedo.proget:inedo-proget
CVE-2015-0254 Vulnerability in maven package javax.servlet.jsp.jstl:jstl