Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-42522 · ADVISORY
• jenkins.io/security/advisory/2026-04-29 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:github-branch-source

• CVE-2026-57285TRUNG BÌNH 4.3A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read per…
• CVE-2018-1000185TRUNG BÌNH 4.3A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attac…
• CVE-2017-1000091TRUNG BÌNH 6.3GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g. GitHub Enterprise) as part of form validation and completion (…
• CVE-2017-1000087TRUNG BÌNH 4.3GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use. Thi…