Package · Maven

org.jenkins-ci.plugins:assembla

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.1

CVE-2026-57303

Jenkins Assembla Plugin has an XXE vulnerability

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perfor…

Jenkins Project Jenkins Assembla Plugin org.jenkins-ci.plugins:assembla Web / CMS Maven

Jun 24, 2026