Jenkins Github vulnerabilities

• jenkins github branch source, jenkins project github branch source plugin +1 more Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs CVE-2026-57285 Fix available 4.3 MediumJune 24, 2026
• jenkins github, jenkins project github plugin +1 more Jenkins GitHub Plugin has an XSS vulnerability CVE-2026-42523 Fix available 9.0 CriticalApril 29, 2026
• jenkins github branch source, jenkins project github branch source plugin +1 more Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test CVE-2026-42522 Fix available 4.3 MediumApril 29, 2026
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin CVE-2024-23903 Fix available 5.3 MediumJanuary 24, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more CSRF vulnerability in Jenkins GitLab Branch Source Plugin CVE-2024-23902 Fix available 4.3 MediumJanuary 24, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin CVE-2024-23901 Fix available 6.5 MediumJanuary 24, 2024
• jenkins github, jenkins project github plugin +1 more Stored XSS vulnerability in Jenkins GitHub Plugin CVE-2023-46650 Fix available 5.4 MediumOctober 25, 2023
• jenkins github pull request coverage status, jenkins project github pull request coverage status plugin +1 more Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin CVE-2023-24442 5.5 MediumJanuary 24, 2023
• jenkins github pull request builder, jenkins project github pull request builder plugin +1 more Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs CVE-2023-24436 4.3 MediumJanuary 24, 2023
• jenkins github pull request builder, jenkins project github pull request builder plugin +1 more Missing permission checks in Jenkins GitHub Pull Request Builder Plugin CVE-2023-24435 6.5 MediumJanuary 24, 2023
• jenkins github pull request builder, jenkins project github pull request builder plugin +1 more CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin CVE-2023-24434 8.8 HighJanuary 24, 2023
• jenkins github, jenkins project github plugin +1 more Jenkins GitHub plugin uses weak webhook signature function CVE-2022-36885 Fix available 5.3 MediumJuly 27, 2022
• jenkins github coverage reporter, jenkins project github coverage reporter plugin +1 more Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin CVE-2020-2212 4.3 MediumJuly 2, 2020
• jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 more Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin CVE-2020-2118 Fix available 4.3 MediumFebruary 12, 2020
• jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 more Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials CVE-2020-2117 Fix available 4.3 MediumFebruary 12, 2020
• jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 more CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials CVE-2020-2116 Fix available 8.8 HighFebruary 12, 2020
• jenkins github authentication, jenkins project github authentication plugin +1 more Jenkins GitHub Authentication Plugin Cross-Site Request Forgery vulnerability CVE-2019-10315 Fix available 8.8 HighApril 30, 2019
• jenkins project github authentication plugin, jenkins github oauth +1 more GitHub Authentication Plugin session fixation vulnerability CVE-2019-1003019 Fix available 5.9 MediumFebruary 6, 2019
• jenkins project github authentication plugin, jenkins github oauth +1 more GitHub Authentication Plugin showed plain text client secret in configuration form CVE-2019-1003018 Fix available 4.3 MediumFebruary 6, 2019
• jenkins github CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials CVE-2018-1000600 Fix available EPSS 90.9% 8.8 HighJune 26, 2018
• jenkins github pull request builder Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability CVE-2018-1000186 Fix available 6.5 MediumJune 5, 2018
• jenkins github branch source Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery CVE-2018-1000185 Fix available 4.3 MediumJune 5, 2018
• jenkins github Jenkins GitHub Plugin server-side request forgery vulnerability exists CVE-2018-1000184 Fix available 5.4 MediumJune 5, 2018
• jenkins github Jenkins GitHub Plugin exposure of sensitive information vulnerability exists CVE-2018-1000183 Fix available 6.5 MediumJune 5, 2018
• jenkins github pull request builder Jenkins GitHub Pull Request Builder Plugin CVE-2018-1000143 Fix available 6.7 MediumApril 5, 2018
• jenkins github pull request builder Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials CVE-2018-1000142 Fix available 7.8 HighApril 5, 2018
• jenkins github branch source Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery CVE-2017-1000091 Fix available 6.3 MediumOctober 4, 2017
• jenkins github branch source Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs CVE-2017-1000087 Fix available 4.3 MediumOctober 4, 2017