Product · Jenkins Project

Jenkins GitHub Branch Source Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2026-57285

Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

Jenkins Project Jenkins GitHub Branch Source Plugin org.jenkins-ci.plugins:github-branch-source Web / CMS Maven

Jun 24, 2026
Medium 4.3

CVE-2026-42522

Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials.

Jenkins Project Jenkins GitHub Branch Source Plugin org.jenkins-ci.plugins:github-branch-source Web / CMS Maven

Apr 29, 2026