CVE-2025-47888
Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks.
CVSS 3.1 · 5.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products