-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:credentials-binding | maven | <= 1.22 | 1.23 |
Miggo AIRoot Cause AnalysisThe vulnerability arises because the plugin's secret masking mechanism in versions <=1.22 did not handle escaped '$$' sequences generated as a side effect of SECURITY-698. The fix in 1.23 introduces DollarSecretPatternFactory to mask both original and escaped forms. The absence of this factory in prior versions indicates that the core masking logic in SecretBuildWrapper (or related components) failed to process escaped forms. The test cases in the commit verify that both original and escaped forms are now masked, confirming that the pre-patch masking implementation was incomplete.
JavaJavaOngoing coverage of React2Shell