CVE Intelligence

Jenkins Project Jenkins SCM-Manager Plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Project Jenkins SCM-Manager Plugin: 2 record(s), with affected versions and fixes.

CVE-2026-70435 Medium · 4.2 CWE-862 Aug 5, 2026
Missing Authorization in Jenkins Project Jenkins SCM-Manager Plugin
A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2026-70434 Medium · 4.2 CWE-352 Aug 5, 2026
Cross-Site Request Forgery (CSRF) in Jenkins Project Jenkins SCM-Manager Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.