4.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.
Basic Information
ID
CVE-2026-48925
Source
jenkins
Published
May 27, 2026 at 14:13
Modified
May 27, 2026 at 15:22
Affected Product
Vendor
Jenkins Project
Product
Jenkins GitHub Integration Plugin
Affected Versions
Jenkins Project Jenkins GitHub Integration Plugin 0