Medium severity4.3NVD Advisory· Published May 27, 2026· Updated Jun 17, 2026
CVE-2026-48925
CVE-2026-48925
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:github-integration-parentMaven | < 0.7.4 | 0.7.4 |
Affected products
3<=0.7.3+ 1 more
- (no CPE)range: <=0.7.3
- (no CPE)range: <=0.7.3
- cpe:2.3:a:kostyasha:github_integration:*:*:*:*:*:jenkins:*:*Range: <0.7.4
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-rf8w-7c3g-7h3gghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-48925ghsaADVISORY
- www.jenkins.io/security/advisory/2026-05-27/nvdVendor AdvisoryWEB
News mentions
2- Jenkins Security Advisory: 13 CVEs Across 11 Plugins Disclosed May 2026Vypr Intelligence · May 27, 2026
- Jenkins Security Advisory 2026-05-27Jenkins Security Advisories · May 27, 2026