CVE-2026-57285

Summary

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

Affected Software

VendorProductVersion RangeStatus
Jenkins ProjectJenkins GitHub Branch Source Plugin0 <= 1967.1969.v205fd594c821affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References