-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from unencrypted storage of API tokens in config files. The commit diff shows removal of plaintext 'apiToken' fields and replacement with credential ID handling. The deprecated setApiToken() methods that previously handled plaintext credentials (now throwing exceptions) represent the vulnerable functions that implemented insecure storage.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:violation-comments-to-gitlab | maven | < 2.29 | 2.29 |