Description
Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.
Remediation
References
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-713
http://www.openwall.com/lists/oss-security/2019/07/31/1
Related Vulnerabilities
CVE-2023-42794 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2021-20328 Vulnerability in maven package org.mongodb:mongodb-driver-sync
CVE-2022-44729 Vulnerability in maven package org.apache.xmlgraphics:batik-bridge
CVE-2018-1000175 Vulnerability in maven package org.jenkins-ci.plugins:htmlpublisher
CVE-2023-33008 Vulnerability in maven package org.apache.johnzon:johnzon