Package · Maven

org.jenkins-ci.plugins:bearychat

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 6.5

CVE-2023-24459

Missing permission check in Jenkins BearyChat Plugin

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Jenkins Project Jenkins BearyChat Plugin org.jenkins-ci.plugins:bearychat Web / CMS Maven

Jan 24, 2023
High 8.8

CVE-2023-24458

Cross-site request forgery vulnerability in Jenkins BearyChat Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL.

Jenkins Project Jenkins BearyChat Plugin org.jenkins-ci.plugins:bearychat Web / CMS Maven

Jan 24, 2023