Mattermost (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 32 known versions, newest CVE from 2024-04-26. Vendor: Jenkins.

CVEs of Mattermost

• CVE-2024-4195 - CVSS 2.7 (low), 2024-04-26: Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team…
• CVE-2019-1003026 - CVSS 4.3 (medium), 2019-02-20: A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows…