CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2026-57305

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 1.1%

CVSS Severity

CVSS v3 Score 5.4

References

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3692%20(2)

Products affected by CVE-2026-57305

Jenkins » Assembla » Version: 1.0

cpe:2.3:a:jenkins:assembla:1.0
Jenkins » Assembla » Version: 1.1

cpe:2.3:a:jenkins:assembla:1.1
Jenkins » Assembla » Version: 1.2

cpe:2.3:a:jenkins:assembla:1.2
Jenkins » Assembla » Version: 1.3

cpe:2.3:a:jenkins:assembla:1.3
Jenkins » Assembla » Version: 1.4

cpe:2.3:a:jenkins:assembla:1.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-57305

Products

Pricing

Contact Us