6.5
Medium
CVE-2026-70439 Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking…
Description
Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins XML Job to Job DSL Plugin 0.1 | earliest → 0.1.13 | No fix stated |