Skip to content
OpenAdvisories

Package · Maven

org.jvnet.hudson.plugins:hipchat

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Jenkins HipChat Plugin allows credential capture due to incorrect authorization

    An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified creden…