A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.
CVSS 3.1MEDIUM 4.3·Network·No auth·User interaction·EPSS 0.00105·Published 2026-05-27·Fixed in 0.7.4CWE-352