Jenkins Project Jenkins LDAP Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins LDAP Plugin: 3 record(s), with affected versions and fixes.
CVE-2026-84662
Medium · 4.3
CWE-601 Sep 2, 2026
Open Redirect in Jenkins Project Jenkins LDAP Plugin
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.
CVE-2026-48917
Medium · 6.6
CWE-502 May 27, 2026
Deserialization of Untrusted Data in Jenkins Ldap
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
CVE-2026-48916
Medium · 6.6
CWE-918 May 27, 2026
Server-Side Request Forgery (SSRF) in Jenkins Ldap
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.