En bref
- CVE-2019-1003026 est une vulnérabilité MOYENNE (CVSS 4.3) touchant org.jenkins-ci.plugins:mattermost, mattermost (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.90%, plus élevée que 59.7% des vulnérabilités.
- Correctif : mettre à jour vers 2.6.3 ou plus récent.
Description
A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.
NVD description
A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.
Autres vulnérabilités de org.jenkins-ci.plugins:mattermost
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free