LDAP Plugin
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-48917 | Med | 0.43 | 6.6 | 0.00 | May 27, 2026 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation. | ||
| CVE-2026-48916 | Med | 0.43 | 6.6 | 0.00 | May 27, 2026 | Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. | ||
| CVE-2026-84662 | Med | 0.28 | 4.3 | 0.00 | Sep 2, 2026 | Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL. |
- risk 0.43cvss 6.6epss 0.00
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
- risk 0.43cvss 6.6epss 0.00
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.
- risk 0.28cvss 4.3epss 0.00
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.