Description
An exposure of sensitive information vulnerability exists in Jenkins meliora-testlab Plugin 1.14 and earlier in TestlabNotifier.java that allows attackers with file system access to the Jenkins master to obtain the API key stored in this plugin's configuration.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-847
Related Vulnerabilities
CVE-2023-37579 Vulnerability in maven package org.apache.pulsar:pulsar-functions-worker
CVE-2023-45143 Vulnerability in maven package org.webjars.npm:undici
CVE-2022-34814 Vulnerability in maven package org.jenkins-ci.plugins:rrod
CVE-2018-1000144 Vulnerability in maven package org.jenkins-ci.plugins:cucumber-living-documentation
CVE-2023-4303 Vulnerability in maven package org.jenkins-ci.plugins:fortify