Veille CVE

Recherche « Jenkins assembla »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins assembla » ✕
  1. CVE-2026-57305 5.4 Moyenne

    Jenkins Project Jenkins Assembla Plugin · Jenkins assembla

    A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

  2. CVE-2026-57304 5.4 Moyenne

    Jenkins Project Jenkins Assembla Plugin · Jenkins assembla

    A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.

  3. CVE-2026-57303 7.1 Élevée

    Jenkins Project Jenkins Assembla Plugin · Jenkins assembla

    Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.