5.4
Medium
CVE-2026-57304 A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to…
Description
A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Assembla Plugin 1.4 | earliest → 1.4 | No fix stated |
Other CVEs of Jenkins Assembla Plugin
The 4 CVEs of Jenkins Assembla Plugin →
CVE-2026-57305
A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect…
5.4
Medium
CVE-2026-57303
Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE)…
7.1
High
CVE-2019-10420
Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they…
Not rated