Executive brief
Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
Affected products
- Maven org.jenkins-ci.plugins:github-branch-source
Junglewise Threat Intelligence
CVE-2026-42522: Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
CVE-2026-42522 · Severity: low · CVSS 3.1 · Published 2026-04-29
Vendors: Maven.
Related threats
- Jenkins GitHub Branch Source Plugin missing permission check in API endpoint
- Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
- Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
- Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery