CVE-2023-30528mediumCWE-312

CVE-2023-30528: medium-severity vulnerability in Jenkins WSO2 Oauth Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins WSO2 Oauth Plugin+ Monitor org.jenkins-ci.plugins:wso2id-oauth

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Jenkins Project · Jenkins WSO2 Oauth Plugin
Related CVEs — Jenkins WSO2 Oauth Plugin

In the same product, most dangerous first.

CVE-2025-47889CRITICALCVE-2025-47889EPSS 0.6%CVE-2023-33005MEDIUMCVE-2023-33005EPSS 0.4%CVE-2023-30527MEDIUMCVE-2023-30527EPSS 0.3%CVE-2023-33006MEDIUMCVE-2023-33006EPSS 0.3%