-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability stemmed from explicitly writing the raw authentication object's string representation in AboutUser.java. The patch (9af9efae6e9ed408ca89ff9b5f1b7a74da0a131f) removed the line 'out.println(" * Raw: " + Markdown.escapeBacktick(...authentication.toString()) + "")' which directly addressed the exposure. This function was clearly responsible for including sensitive session data in support bundles.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:support-core | maven | <= 2.72 | 2.72.1 |
Ongoing coverage of React2Shell