Package · Maven

org.jenkins-ci.plugins:slack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 4.2

CVE-2019-1003043

Jenkins Slack Notification Plugin missing permission check

A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credenti…

Jenkins Project Jenkins Slack Notification Plugin org.jenkins-ci.plugins:slack Web / CMS Maven

Mar 28, 2019
High 7.1

CVE-2019-1003044

Jenkins Slack Notification Plugin CSRF vulnerability and missing permission checks

A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in…

Jenkins Project Jenkins Slack Notification Plugin org.jenkins-ci.plugins:slack Web / CMS Maven

Mar 28, 2019