Comments (2)
duhanmin
commented on May 23, 2024
DingTalk插件以纯文本格式存储凭据
安全-1423 / CVE-2019-10433
DingTalk插件将未加密的访问令牌存储config.xml在Jenkins主服务器的作业文件中。具有扩展读取权限或访问主文件系统的用户可以查看此令牌。
截至本公告发布之时，尚无修复程序
https://jenkins.io/security/advisory/2019-10-01/#SECURITY-1423
from dingtalk-plugin.
liuweiGL
commented on May 23, 2024
看文档。
from dingtalk-plugin.
Related Issues (20)
- 使用流水线无法发送消息 HOT 1
- 系统配置好了Jenkins，测试也可以正常发消息，在流水线中发布不成功 HOT 1
- ERROR: Step ‘Dingding Json Pusher’ aborted due to exception: HOT 2
- 自定义机器人下线后，这个还能用吗 HOT 6
- 配置钉钉手机号，at人是假at，没有提醒，不可点击 HOT 1
- 通知时机增加"修正状态" HOT 1
- 新版本无法使用
- dingtalk插件使用报错，测试error HOT 3
- 禁用了内置消息，freestyle的markdown格式不生效，钉钉通知的标题是默认的“jenkins构建通知”
- [BUG]关键字的帮助按钮点击后报错
- 钉钉点测试后无反应 F12报错 HOT 6
- dingtalk-plugin版本2.7.0，点击无反应 HOT 2
- 调用DingTalk报错FormatConversionException HOT 2
- 选中 `禁用内置消息` 复选框后下方无法在 `自定义内容` 和 `自定义消息` 之间切换
- TODO
- 钉钉的btn按钮回到Jennins的Input时无法使用post方式 HOT 1
- Cannot invoke "io.jenkins.plugins.DingTalkUserProperty.getMobile()"
- 自由风格项目禁用内置消息后如何设置AT通知人 HOT 1
- 2.7.3版本不兼容，配置完钉钉插件，无法保存配置
- 禁用内置消息 希望可以有@别人的功能
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dingtalk-plugin.