CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 10:40 p.m.•9 views

CVE-2022-28138

A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...

4.3CVSS6.7AI score0.00583EPSS

Exploits0References1

OSV•added 2022/03/29 1:15 p.m.•20 views

CVE-2022-28138

4.3CVSS6.7AI score

Exploits0References2

CVE•added 2022/03/29 12:30 p.m.•118 views

CVE-2022-28138

CVE-2022-28138 is a CSRF flaw in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier that allows an attacker with no special privileges to cause the controller to connect to a URL of the attacker’s choosing using attacker‑supplied credentials. The linked sources confirm the affected component (...

4.3CVSS4.5AI score0.00583EPSS

Exploits0References2Affected Software1