Package · Maven

org.jenkins-ci.plugins:slack

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.2

CVE-2019-1003043

Jenkins Slack Notification Plugin missing permission check

A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credenti…

Jenkins Project Jenkins Slack Notification Plugin org.jenkins-ci.plugins:slack Web / CMS Maven

Mar 28, 2019