medium5.3
CVE-2018-1000112
Incorrect Authorization in Jenkins Mercurial Plugin
Impact
An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:mercurial | <= 2.2 | 2.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Mercurial | through 2.2 |