CVE-2023-39152

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-39152
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39152.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-39152
Aliases
Published
2023-07-26T14:15:10.550Z
Modified
2026-07-15T06:01:13.413107Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.

References

Affected packages

Git / github.com/jenkinsci/gradle-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/gradle-plugin
Events
Introduced
26852ff123b07ebde3cc78ee0e3f0b399bffd293
Last affected
26852ff123b07ebde3cc78ee0e3f0b399bffd293
Database specific 
{
    "cpe": "cpe:2.3:a:jenkins:gradle:2.8:*:*:*:*:jenkins:*:*",
    "extracted_events": [
        {
            "introduced": "2.8"
        },
        {
            "last_affected": "2.8"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.8
gradle-2.*
gradle-2.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-39152.json"