Lucene search
GoogleOSV:GHSA-5R8Q-9FWV-2GPRHistoryMay 13, 2022 - 1:25 a.m.
Jenkins Slack Notification Plugin CSRF vulnerability and missing permission checks
2022-05-1301:25:43
Google
osv.dev
3
jenkins
slack
notification
plugin
csrf
vulnerability
missing
permission
checks
cross-site
request
forgery
credentials
capture
A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Related
osv
osv
CVE-2019-1003044
2019-03-28 18:29:00
github
github
cvelist
cvelist
CVE-2019-1003044
2019-03-28 17:59:29
prion
prion
Cross site request forgery (csrf)
2019-03-28 18:29:00
nvd
nvd
CVE-2019-1003044
2019-03-28 18:29:00
cve
cve
CVE-2019-1003044
2019-03-28 18:29:00