M2release Security Vulnerabilities and Issues — M2release CVE List

Lucene search

JenkinsM2release

2 matches found

CVE•added 2019/07/31 1:15 p.m.•46 views

CVE-2019-10361

Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.

5.5CVSS5.3AI score0.00018EPSS

CVE•added 2019/07/31 1:15 p.m.•40 views

CVE-2019-10359

A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.

6.8CVSS6.2AI score0.00136EPSS