Package · Maven

org.jenkins-ci.plugins:pipeline-githubnotify-step

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.1

CVE-2020-2117

Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials

A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturin…

Jenkins Project Jenkins Pipeline GitHub Notify Step Plugin org.jenkins-ci.plugins:pipeline-githubnotify-step Web / CMS Maven

Feb 12, 2020
High 7.1

CVE-2020-2116

CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials

A cross-site request forgery vulnerability in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials…

Jenkins Project Jenkins Pipeline GitHub Notify Step Plugin org.jenkins-ci.plugins:pipeline-githubnotify-step Web / CMS Maven

Feb 12, 2020