CVE-2023-50777

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-312CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-507788.8A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an atCVE-2023-507794.3Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to aCVE-2023-50786.7A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOCVE-2023-507808.8Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticateCVE-2023-507817.5A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges,CVE-2023-507827.5A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers thatCVE-2023-507836.5Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permissionCVE-2023-507847.5A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the serverCVE-2023-507852.7Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal.CVE-2023-507864.3Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images. TCVE-2023-50797.5Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could resulCVE-2023-50807.8A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identi
CVE-2023-50777: Medium severity, CVSS 4.3 | Vulnix