Jenkins Appspider vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Appspider: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:appspider

CVE-2026-48923 Medium · 4.3 CWE-269 May 27, 2026

Jenkins AppSpider Plugin does not perform a permission check in a method implementing form validation

Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL.