Github Branch Source (Jenkins) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 68 known versions, newest CVE from 2026-06-24. Vendor: Jenkins.
CVEs of Github Branch Source
- CVE-2026-57285 - CVSS 4.3 (medium), 2026-06-24: A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain…
- CVE-2026-42522 - CVSS 4.3 (medium), 2026-04-29: A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect…
- CVE-2024-23901 - CVSS 6.5 (medium), 2024-01-24: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group,…
- CVE-2024-23903 - CVSS 5.3 (medium), 2024-01-24: Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and…
- CVE-2024-23902 - CVSS 4.3 (medium), 2024-01-24: A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an…
- CVE-2018-1000185 - CVSS 4.3 (medium), 2018-06-05: A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with…
- CVE-2017-1000091 - CVSS 6.3 (medium), 2017-10-05: GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g. GitHub Enterprise) as part of form validation and completion (e.g. to verify…
- CVE-2017-1000087 - CVSS 4.3 (medium), 2017-10-05: GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use. This functionality…
