Skip to content
OpenAdvisories
Medium · 6.6 CVE-2026-48917 EUVD-2026-32508GHSA-x9v8-p946-5pwc

Jenkins LDAP Plugin deserializes data from LDAP referrals without validation

Published May 27, 2026 · Updated May 27, 2026 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins LDAP Plugin Package: org.jenkins-ci.plugins:ldap Category: Web / CMS Ecosystem: Maven

Description

Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins LDAP Plugin ≤ 807.v7d7de30930cf —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:ldap < 807.809.vd3a 807.809.vd3a GHSA-x9v8-p946-5pwc

Advisories 1

References