Veille CVE

Recherche « Jenkins github »

4 CVE

Critique 1 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins github » ✕
  1. CVE-2026-57285 4.3 Moyenne

    Jenkins Project Jenkins GitHub Branch Source Plugin · Jenkins github branch source

    A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

  2. CVE-2026-48925 4.3 Moyenne

    Jenkins Project Jenkins GitHub Integration Plugin · Kostyasha github integration

    A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

  3. CVE-2026-42523 9.0 Critique

    Jenkins Project Jenkins GitHub Plugin · Jenkins github

    Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission.

  4. CVE-2026-42522 4.3 Moyenne

    Jenkins Project Jenkins GitHub Branch Source Plugin · Jenkins github branch source

    A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials.