Maven package
com.axis.jenkins.plugins.eiffel/eiffel-broadcaster
pkg:maven/com.axis.jenkins.plugins.eiffel/eiffel-broadcaster
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-24400 | — | >= 2.8.0, < 2.10.3 | 2.10.3 | Jan 22, 2025 | Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event publish |
- CVE-2025-24400Jan 22, 2025affected >= 2.8.0, < 2.10.3fixed 2.10.3
Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event publish