Threats tagged 'ghsa-8wp4-r84g-gcmw'

The Jenkins Testsigma Test Plan run Plugin (version 1.6 and earlier) stores Testsigma API keys in job configuration files on the Jenkins controller. Although these keys are encrypted on disk, the plugin's job configuration form does not mask the API keys, potentially allowing attackers with access to the form to observe and capture them. There is currently no fix available for this issue.