Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-57303

Jenkins Assembla Plugin XXE Vulnerability Allows Secret Extraction

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project
Products
Assembla Jenkins Assembla Plugin
CVE-2026-57304

Missing Permission Check Allows Credential Leakage to External URLs in Jenkins Assembla Plugin

A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username and password.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project
Products
Assembla Jenkins Assembla Plugin
CVE-2026-57305

CSRF Enables External Connections via Jenkins Assembla Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project
Products
Assembla Jenkins Assembla Plugin