> CVE-2026-57292

« BACK_TO_HOME
PUBLISHED
2026-06-24 14:17
MODIFIED
2026-06-24 14:17
EPSS (Prob. Exploit)
0.14%
Top 97.2%
DATA SOURCES:
NVD 🔗 2026-06-24 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05

> DESCRIPTION

A cross-site request forgery (CSRF) vulnerability in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-w794-rwp2-jc9m MODERATE

Jenkins Gitee Plugin has a cross-site request forgery vulnerability

AFFECTED PACKAGES:
MAVEN / org.jenkins-ci.plugins:gitee
< 1292.v2559f2f3f2c0
Fixed in: 1292.v2559f2f3f2c0

> HISTORIQUE DES MODIFICATIONS

Première apparition
24/06/2026 14:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3762%20(1)
« BACK_TO_HOME