Skip to content
OpenAdvisories
Medium · 6.6 CVE-2026-48919 EUVD-2026-32510GHSA-p2gw-f3rv-82mw

Jenkins Active Directory Plugin deserializes data from LDAP referrals without validation

Published May 27, 2026 · Updated May 27, 2026 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Active Directory Plugin Package: org.jenkins-ci.plugins:active-directory Category: Web / CMS Ecosystem: Maven

Description

Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Active Directory Plugin ≤ 2.41 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:active-directory < 2.41.1 2.41.1 GHSA-p2gw-f3rv-82mw

Advisories 1

References