CVE-2026-57306

Name of the Vulnerable Software and Affected Versions Jenkins Zowe zDevOps Plugin versions prior to 1.1.3.50.ve350c9b 450b 1

Description A cross-site request forgery (CSRF) flaw allows attackers to force the system to connect to an attacker-specified URL. By using credentials IDs obtained through other means, the attacker can capture credentials stored within Jenkins. CSRF is a type of attack that tricks a victim into submitting a malicious request.

Recommendations Update Jenkins Zowe zDevOps Plugin to a version later than 1.1.3.50.ve350c9b 450b 1.