Em resumo
- CVE-2019-1003026 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta org.jenkins-ci.plugins:mattermost, mattermost (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.90%, maior que 59.8% das vulnerabilidades.
- Correção: atualize para 2.6.3 ou posterior.
Description
A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.
NVD description
A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.
Mais vulnerabilidades de org.jenkins-ci.plugins:mattermost
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free