Skip to content
Sign in
4.3 Medium

CVE-2025-58459 Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API…

Description

Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs.

Affected products and versions

Product Affected versions Fixed in
Jenkins global-build-stats Plugin Versions not published

Other CVEs of Jenkins global-build-stats Plugin

The 2 CVEs of Jenkins global-build-stats Plugin →
CVE-2022-27207 Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the… Not rated
Track this CVE