Zanata Security Vulnerabilities

CVE-2023-46660

Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token hashes are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook...

CVE-2013-4486

Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in...