Published: 28/03/2019 Updated: 25/10/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.1 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 187

Vector: AV:N/AC:H/Au:S/C:P/I:N/A:N

A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and previous versions allows malicious users to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jenkins slack notification

oss-sec mailing list archives   By Date By Thread </form>    Re: Multiple vulnerabilities in Jenkins plugins   From: Daniel Beck <m ...

Service (and data layer) for CVE Dashboard

CVE Service Layer API This is an application developed using the Spring Boot Web MVC starter project that exposes multiple URL endpoints for retrieving Common Vulnerabilities and Exposures (CVEs) These vulnerabilities were obtained from the National Vulnerability Database's data feeds These data feeds were downloaded and subsequently scrubbed using Elasticsearch and ad

CWE-352 https://jenkins.io/security/advisory/2019-03-25/#SECURITY-976 http://www.openwall.com/lists/oss-security/2019/03/28/2 http://www.securityfocus.com/bid/107628 https://nvd.nist.gov https://github.com/michaelyebba/cve-dashboard-service http://seclists.org/oss-sec/2019/q1/198

CVE-2019-1003044

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect