-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:ghprb | maven | < 1.32.1 | 1.32.1 |
The reasoning is based on the information provided in the Jenkins Security Advisory and the understanding that the vulnerability involves the storage of the webhook secret in plain text. The fix involved encrypting the storage of this secret. GhprbCause is mentioned in the NVD description as related to the exposure of sensitive information vulnerability.