PT-2026-51814 · Jenkins · Assembla Plugin
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins Assembla Plugin versions prior to 1.5
Description
A missing permission check allows users with Overall/Read permission to force the system to connect to an arbitrary URL using a specified username and password.
Recommendations
Update Jenkins Assembla Plugin to version 1.5 or later.
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Assembla Plugin