PT-2026-44016 · Jenkins · Appspider Plugin

Surrealgrain

·

CVE-2026-48923

·

Published

2026-05-27

·

Updated

2026-05-28

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Jenkins AppSpider Plugin versions prior to 1.0.18
Description A missing permission check in a method implementing form validation allows users with Overall/Read permissions to trigger a connection to an attacker-specified URL.
Recommendations Update to version 1.0.18 or later.

Fix

Improper Privilege Management

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-48923
GHSA-9WM7-8QF3-9V98

Affected Products

Appspider Plugin