Package · Maven

org.jenkins-ci.plugins:rocketchatnotifier

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2022-28139

Missing permission check in Jenkins RocketChat Notifier Plugin

A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Jenkins Project Jenkins RocketChat Notifier Plugin org.jenkins-ci.plugins:rocketchatnotifier Web / CMS Maven

Mar 29, 2022
Medium 4.3

CVE-2022-28138

CSRF vulnerability in Jenkins RocketChat Notifier Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.

Jenkins Project Jenkins RocketChat Notifier Plugin org.jenkins-ci.plugins:rocketchatnotifier Web / CMS Maven

Mar 29, 2022