Junglewise Threat Intelligence

CVE-2025-58459: Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated

CVE-2025-58459 · Severity: low · CVSS 3.1 · Published 2025-09-03

Technologies: org.jenkins-ci.plugins:global-build-stats (Maven). Vendors: Maven.

Executive brief

Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated

Affected products

  • Maven org.jenkins-ci.plugins:global-build-stats

Related threats