CVE-2026-57305 PUBLISHED

Assigner: jenkins
Reserved: 24.06.2026 Published: 24.06.2026 Updated: 24.06.2026

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

Product Status

Vendor Jenkins Project
Product Jenkins Assembla Plugin
Versions Default: unknown
  • affected from 0 to 1.4 (incl.)

References