Jenkins Mattermost Notification Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-10-23. Vendor: Jenkins Project.

CVEs of Jenkins Mattermost Notification Plugin

• CVE-2019-10459 - CVSS 6.5 (medium), 2019-10-23: Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in its global configuration file and job…
• CVE-2019-1003026 - CVSS 4.3 (medium), 2019-02-20: A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows…