M2release (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 26 known versions, newest CVE from 2019-07-31. Vendor: Jenkins.

CVEs of M2release

• CVE-2019-10361 - CVSS 5.5 (medium), 2019-07-31: Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the…
• CVE-2019-10359 - CVSS 6.3 (medium), 2019-07-31: A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to…