CVE-2023-46660

Name of the Vulnerable Software and Affected Versions Jenkins Zanata Plugin versions 0.6 and earlier

Description The issue is related to the use of a non-constant time comparison function when checking whether the provided and expected webhook token hashes are equal. This potentially allows attackers to use statistical methods to obtain a valid webhook token.

Recommendations For Jenkins Zanata Plugin versions 0.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.