Jenkins Github Branch Source vulnerabilities

• jenkins github branch source, jenkins project github branch source plugin +1 more Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs CVE-2026-57285 Fix available 4.3 MediumJune 24, 2026
• jenkins github branch source, jenkins project github branch source plugin +1 more Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test CVE-2026-42522 Fix available 4.3 MediumApril 29, 2026
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin CVE-2024-23903 Fix available 5.3 MediumJanuary 24, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more CSRF vulnerability in Jenkins GitLab Branch Source Plugin CVE-2024-23902 Fix available 4.3 MediumJanuary 24, 2024
• jenkins project gitlab branch source plugin, jenkins github branch source +1 more Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin CVE-2024-23901 Fix available 6.5 MediumJanuary 24, 2024
• jenkins github branch source Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery CVE-2018-1000185 Fix available 4.3 MediumJune 5, 2018
• jenkins github branch source Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery CVE-2017-1000091 Fix available 6.3 MediumOctober 4, 2017
• jenkins github branch source Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs CVE-2017-1000087 Fix available 4.3 MediumOctober 4, 2017