Junglewise Threat Intelligence

CVE-2022-43410: Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin

CVE-2022-43410 · Severity: low · CVSS 3.1 · Published 2022-10-19

Technologies: org.jenkins-ci.plugins:mercurial (Maven). Vendors: Maven.

Executive brief

Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin

Affected products

  • Maven org.jenkins-ci.plugins:mercurial

Related threats