Slack Notification

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-1003044 Maven HIGH PATCH This Week

A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.

Jenkins CSRF Slack Notification

NVD

CVSS 3.0

7.1

EPSS

1.1%

CVE-2019-1003043 Maven HIGH PATCH This Week

A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Jenkins Slack Notification

NVD

CVSS 3.1

7.5

EPSS

1.5%

CVE-2019-1003044 Maven

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Jenkins CSRF Slack Notification

NVD

CVE-2019-1003043 Maven

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Authentication Bypass Jenkins Slack Notification

NVD