PT-2026-44018

CVE-2026-48925

Published

2026-05-27

Updated

2026-05-28

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins GitHub Integration Plugin versions prior to 0.7.4

Description A cross-site request forgery (CSRF) flaw allows attackers to trigger a build for a pull request. CSRF is a type of attack that tricks a victim into submitting a malicious request to a web application where they are currently authenticated.

Recommendations Update to a version later than 0.7.3.

Exploitability

Fix

Impacts

Researchers

Dyingman1

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

Related identifiers

CVE-2026-48925