VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jun 24, 2026· Updated Jun 26, 2026

CVE-2026-57285

CVE-2026-57285

Description

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

Affected products

2
  • Jenkins Project/Github Branch Source2 versions
    cpe:2.3:a:jenkins:github_branch_source:*:*:*:*:*:jenkins:*:*+ 1 more
    • cpe:2.3:a:jenkins:github_branch_source:*:*:*:*:*:jenkins:*:*range: <=1967.1969.v205fd594c821
    • (no CPE)range: <=1967.1969.v205fd594c821

Patches

Vulnerability mechanics

References

1

News mentions

2