Executive brief
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
Affected products
- Maven com.coravy.hudson.plugins.github:github
Junglewise Threat Intelligence
CVE-2018-1000600: CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
CVE-2018-1000600 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: com.coravy.hudson.plugins.github:github (Maven). Vendors: Maven.
Related threats
- Jenkins GitHub Plugin stored XSS in job URL validation
- Stored XSS vulnerability in Jenkins GitHub Plugin
- Jenkins GitHub plugin uses weak webhook signature function
- Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
- Jenkins GitHub Plugin server-side request forgery vulnerability exists