CVE-2026-48923
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL.
| Vendor | jenkins project |
| Product | jenkins appspider plugin |
| Published | May 27, 2026 |
| Last Updated | May 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins appspider plugin
Be the first to know when new medium vulnerabilities affecting jenkins project jenkins appspider plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins AppSpider Plugin
0 ≤ 1.0.17