Aller au contenu
Se connecter
Non notée

CVE-2019-1003026 A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in…

Description

A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Mattermost Notification Plugin Versions non publiées

Autres CVE de Jenkins Mattermost Notification Plugin

Les 2 CVE de Jenkins Mattermost Notification Plugin →
CVE-2019-10459 Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in… Non notée
Suivre cette CVE