Skip to content
OpenAdvisories

Package · Maven

com.coravy.hudson.plugins.github:github

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-1000184

    Jenkins GitHub Plugin server-side request forgery vulnerability exists

    A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.

    com.coravy.hudson.plugins.github:github Maven
  • Medium 6.5
    CVE-2018-1000183

    Jenkins GitHub Plugin exposure of sensitive information vulnerability exists

    A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtai…

    com.coravy.hudson.plugins.github:github Maven