CVE-2022-43426: Jenkins s3 Explorer

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.

Affected products

• Jenkins s3 Explorer: up to and including 1.0.8

Published 2022-10-19. Last modified 2026-06-17.