Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins Assembla Plugin — Jenkins Security Advisory 2026-06-24 Clear all filters
TI-2026-41242 CVE-2026-57305 · GHSA-429r-3j78-2pxm

Cross-site request forgery in Jenkins Assembla Plugin

Priority LOW 24

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00221 Published 2026-06-24 No fix listed CWE-352
TI-2026-41241 CVE-2026-57304 · GHSA-2r5w-jh6g-8hff

Missing authorization in Jenkins Assembla Plugin

Priority LOW 24

A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00254 Published 2026-06-24 No fix listed CWE-862
TI-2026-41240 CVE-2026-57303 · GHSA-2q27-6p2h-q6r3

Server-side request forgery in Jenkins Assembla Plugin

Priority LOW 31

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secret…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00359 Published 2026-06-24 No fix listed CWE-918