Jenkins Project Jenkins Gogs Plugin

• CVE-2023-46657 Unrated Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use stati 0.7%
• CVE-2023-40349 Unrated Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs. 0.7%
• CVE-2023-40348 Unrated The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output. 0.7%