Description
Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/07/02/7
https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1656
Related Vulnerabilities
CVE-2022-39135 Vulnerability in maven package org.apache.calcite:calcite-core
CVE-2017-16129 Vulnerability in maven package org.webjars.npm:superagent
CVE-2016-6809 Vulnerability in maven package org.apache.tika:tika-parsers
CVE-2019-20921 Vulnerability in maven package org.webjars.npm:bootstrap-select
CVE-2018-1000863 Vulnerability in maven package org.jenkins-ci.main:jenkins-core