Jenkins Mattermost vulnerabilities

1 known vulnerability affecting jenkins/mattermost.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-1003026MEDIUMCVSS 4.3≤ 2.6.22019-02-20

CVE-2019-1003026 [MEDIUM] CWE-918 CVE-2019-1003026: A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 a A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.