Jenkins M2Release vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins M2Release, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2019-10361jenkins projectjenkins maven release plugin+2
EPSS score
0.47%
Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.6.8CVE-2019-10359jenkins projectjenkins maven release plugin+2
EPSS score
0.61%
A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.