> CVE-2026-57291

« BACK_TO_HOME
PUBLISHED
2026-06-24 14:17
MODIFIED
2026-06-24 14:17
EPSS (Prob. Exploit)
0.23%
Top 86.9%
DATA SOURCES:
NVD 🔗 2026-06-24 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05

> DESCRIPTION

Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-wjmq-rpqq-w4h9 MODERATE

Jenkins Gitee Plugin missing permission checks

AFFECTED PACKAGES:
MAVEN / org.jenkins-ci.plugins:gitee
< 1292.v2559f2f3f2c0
Fixed in: 1292.v2559f2f3f2c0

> HISTORIQUE DES MODIFICATIONS

Première apparition
24/06/2026 14:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3762%20(1)
« BACK_TO_HOME