Executive brief
Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated
Affected products
- Maven org.jenkins-ci.plugins:global-build-stats
Junglewise Threat Intelligence
CVE-2025-58459 · Severity: low · CVSS 3.1 · Published 2025-09-03
Technologies: org.jenkins-ci.plugins:global-build-stats (Maven). Vendors: Maven.
Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated