Vulnerabilidades do Jenkins Assembla
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jenkins Assembla: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:jenkins:assembla
CVE-2026-57305
Média · 5.4
CWE-352 24/06/2026
Cross-Site Request Forgery (CSRF) em Jenkins Assembla
A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.
CVE-2026-57304
Média · 5.4
CWE-862 24/06/2026
Missing Authorization em Jenkins Assembla
A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.
CVE-2026-57303
Alta · 7.1
CWE-918 24/06/2026
Server-Side Request Forgery (SSRF) em Jenkins Assembla
Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.