Jenkins Project Jenkins Contrast Continuous Application Security Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Contrast Continuous Application Security Plugin: 3 record(s), with affected versions and fixes.
CVE-2026-57299
Medium · 4.3
CWE-862 Jun 24, 2026
Missing Authorization in Jenkins Contrast Continuous Application Security
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
CVE-2026-57298
Medium · 5.4
CWE-352 Jun 24, 2026
Cross-Site Request Forgery (CSRF) in Jenkins Project Jenkins Contrast Continuous Application Security Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key.
CVE-2026-57297
Medium · 4.3
CWE-862 Jun 24, 2026
Missing Authorization in Jenkins Contrast Continuous Application Security
A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.