Description
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.
Remediation
References
Related Vulnerabilities
WordPress Plugin BetterOptin Cross-Site Scripting (1.2.4)
Envoy Proxy Use of Incorrect Operator Vulnerability (CVE-2026-48497)
WordPress Plugin MSMC-Redirect After Comment Multiple Vulnerabilities (2.1.2)
Joomla Improper Privilege Management Vulnerability (CVE-2018-17855)
WordPress Plugin WordPress Bitcoin Payments-Blockonomics Cross-Site Scripting (3.5.7)