Jenkins Project Jenkins Mattermost Notification Plugin
2 CVEs affecting Jenkins Project Jenkins Mattermost Notification Plugin. Latest disclosed: 2019-10-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10459 | Medium | 6.5 | 2019-10-23 | Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in its global configuration file and job con… |
CVE-2019-1003026 | Medium | 4.3 | 2019-02-20 | A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers… |