Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:dingtalk:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductDingtalk (87e48a79-24bb-5808-8a06-11ac6f83e7cb)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jenkinsci/dingtalk-plugin purl2cpe 2026-06-01 10:14:09.400746

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47888 vulnerable 2026-06-08 07:27:14.976097 Details available
Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks.
Published: 2025-05-14T20:35:57.422Z
Updated: 2025-05-15T13:24:31.285Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.