Package · Maven

org.jenkins-ci.plugins.m2release:m2release

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.3

CVE-2019-10359

Jenkins Maven Release Plugin contains Cross-Site Request Forgery vulnerability

A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.

Jenkins Project Jenkins Maven Release Plugin org.jenkins-ci.plugins.m2release:m2release Web / CMS Maven

Jul 31, 2019
Medium 5.4

CVE-2019-10360

Jenkins Maven Release Plugin vulnerable to Cross-site Scripting

A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.

Jenkins Project Jenkins Maven Release Plugin org.jenkins-ci.plugins.m2release:m2release Web / CMS Maven

Jul 31, 2019