Jenkins Slack Notification — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Slack Notification, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-1003043 — CVSS 7.5 (high): A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect…
• CVE-2019-1003044 — CVSS 7.1 (high): A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an…