Executive brief
Jenkins GitHub Plugin server-side request forgery vulnerability exists
Affected products
- Maven com.coravy.hudson.plugins.github:github
Junglewise Threat Intelligence
CVE-2018-1000184: Jenkins GitHub Plugin server-side request forgery vulnerability exists
CVE-2018-1000184 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: com.coravy.hudson.plugins.github:github (Maven). Vendors: Maven.
Related threats
- Jenkins GitHub Plugin stored XSS in job URL validation
- Stored XSS vulnerability in Jenkins GitHub Plugin
- Jenkins GitHub plugin uses weak webhook signature function
- Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
- CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials