Security Advisory

CVE-2026-48923

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-27 14:13:50

Last updated 2026-05-27 15:23:37

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-specified URL.

← Browse all CVEs View on cve.org ↗