GHSA-jx45-xp6q-cwjc

Source

https://github.com/advisories/GHSA-jx45-xp6q-cwjc

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/01/GHSA-jx45-xp6q-cwjc/GHSA-jx45-xp6q-cwjc.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jx45-xp6q-cwjc

Aliases

CVE-2025-0142

Published

2025-01-30T21:31:23Z

Modified

2025-03-13T19:28:47Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Jenkins Zoom Plugin Stores Sensitive Information in Cleartext

Details

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access.

Database specific

{
    "cwe_ids":  [
        "CWE-312"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-03-13T19:19:06Z",
    "nvd_published_at":  "2025-01-30T20:15:33Z",
    "severity":  "MODERATE"
}

References

Affected packages

Maven / io.jenkins.plugins:zoom

Package

Name: io.jenkins.plugins:zoom; View open source insights on deps.dev
Purl: pkg:maven/io.jenkins.plugins/zoom

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4

Affected versions

1.*

1.0

1.1

1.2

1.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/01/GHSA-jx45-xp6q-cwjc/GHSA-jx45-xp6q-cwjc.json"