Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-48925 2 Jenkins Project, Kostyasha 2 Jenkins Github Plugin, Github Integration 2026-05-30 4.3 Medium
A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.
CVE-2026-42523 2 Jenkins, Jenkins Project 2 Github, Jenkins Github Plugin 2026-05-05 9 Critical
Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission.