CVE-2024-47803

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-47803

CGA ID

CGA-qmh5-56cf-wx3f

Severity

4.3

Medium

CVSS V3

Description

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field.

References

https://images.chainguard.dev/security/CGA-qmh5-56cf-wx3f
https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CVE-2024-47803

Severity

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources