Package · Maven

org.jenkins-ci.plugins:assembla

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.4

CVE-2026-57304

Jenkins Assembla Plugin has a missing permission check

A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.

Jenkins Project Jenkins Assembla Plugin org.jenkins-ci.plugins:assembla Web / CMS Maven

Jun 24, 2026
Medium 5.4

CVE-2026-57305

Jenkins Assembla Plugin has a cross-site request forgery (CSRF) vulnerability

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

Jenkins Project Jenkins Assembla Plugin org.jenkins-ci.plugins:assembla Web / CMS Maven

Jun 24, 2026