Skip to content
4.3 Medium

CVE-2026-57285 A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers…

Description

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

Affected products and versions

Product Affected versions Fixed in
Jenkins GitHub Branch Source Plugin 1967.1969 earliest → 1967.1969.v205fd594c821 No fix stated
The 2 CVEs of Jenkins GitHub Branch Source Plugin →
Track this CVE