Maven Com.rapid7:jenkinsci-appspider-plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Com.rapid7:jenkinsci-appspider-plugin: 1 record(s), with affected versions and fixes.

CVE-2026-48923 Medium · 4.3 CWE-269 May 27, 2026

Jenkins AppSpider Plugin does not perform a permission check in a method implementing form validation

Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL.