> CVE-2026-57303

« BACK_TO_HOME
PUBLISHED
2026-06-24 14:17
MODIFIED
2026-06-24 14:17
EPSS (Prob. Exploit)
0.36%
Top 71.5%
DATA SOURCES:
NVD 🔗 2026-06-24 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05 OSV 🔗 2026-07-26

> DESCRIPTION

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-2q27-6p2h-q6r3 HIGH

Jenkins Assembla Plugin has an XXE vulnerability

AFFECTED PACKAGES:
MAVEN / org.jenkins-ci.plugins:assembla
<= 1.4

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
5 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
24/06/2026 14:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3692%20(1)
« BACK_TO_HOME