CVE-2026-57285

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-57285

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57285.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-57285

Published

2026-06-24T14:17:34.450Z

Modified

2026-07-15T06:09:47.227683Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

References

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3808

Affected packages

Git / github.com/jenkinsci/github-branch-source-plugin

Affected ranges

Type

GIT

Repo

https://github.com/jenkinsci/github-branch-source-plugin

Events

Introduced

Last affected

205fd594c821faaff1a66fedfa7e10973291d70c

Database specific

{
    "cpe": "cpe:2.3:a:jenkins:github_branch_source:*:*:*:*:*:jenkins:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1967.1969.v205fd594c821"
        }
    ]
}

Affected versions

1577.*

1577.v83564088883f

1583.*

1583.v18d333ef7379

1598.*

1598.v91207e9f9b_4a_

1599.*

1599.v9fb_798a_a_7c4f

1602.*

1602.vfe89fe441b_36

1619.*

1619.v962f131fa_c15

1628.*

1628.vb_2f51293cb_78

1637.*

1637.vd833b_7ca_7654

1656.*

1656.v77eddb_b_e95df

1677.*

1677.v731f745ea_0cf

1687.*

1687.v7618247e672d

1694.*

1694.vd46793a_c4a_57

1695.*

1695.v88de84e9f6b_9

1696.*

1696.v3a_7603564d04

1701.*

1701.v00cc8184df93

1703.*

1703.vd5a_2b_29c6cdc

1725.*

1725.vd391eef681a_e

1728.*

1728.v859147241f49

1730.*

1730.vff97c8a_1f804

1732.*

1732.v3f1889a_c475b_

1734.*

1734.v8a_ed3a_653490

1740.*

1740.v51d5810e9e8c

1741.*

1741.va_3028eb_9fd21

1748.*

1748.v6b_61a_1dc35b_4

1750.*

1750.v6b_fb_8df8f985

1751.*

1751.v90e17c48a_6a_c

1752.*

1752.vc201a_0235d80

1755.*

1755.vcdb_d136f3b_25

1758.*

1758.v048414714f5d

1767.*

1767.va_7d01ea_c7256

1771.*

1771.v59b_6a_fa_1b_89e

1772.*

1772.va_69eda_d018d4

1781.*

1781.va_153cda_09d1b_

1785.*

1785.v99802b_69816c

1787.*

1787.v8b_8cd49a_f8f1

1789.*

1789.v5b_0c0cea_18c3

1790.*

1790.v5a_7859812c8d

1793.*

1793.v1831e9c68d77

1797.*

1797.v86fdb_4d57d43

1803.*

1803.v98e3d8a_c8169

1807.*

1807.v50351eb_7dd13

1809.*

1809.v088b_5f22c768

1810.*

1810.v913311241fa_9

1815.*

1815.v9152b_2ff7a_1b_

1822.*

1822.v9eec8e5e69e3

1824.*

1824.v046257273408

1833.*

1833.v77b_6542df5a_8

1834.*

1834.v857721ea_74c6

1844.*

1844.v4a_9883d49126

1848.*

1848.v42f74f7f4500

1862.*

1862.v1a_fc22a_d3788

1864.*

1864.v411feec5e78e

1869.*

1869.vdb_846d75405b_

1871.*

1871.v50ffb_786515e

1906.*

1906.v21c5c13d25c6

1910.*

1910.v4ca_b_2c639cb_0

1911.*

1911.vc09e01781005

1917.*

1917.v9ee8a_39b_3d0d

1925.*

1925.v62fb_7ffb_08ce

1934.*

1934.v23cf60a_47fc3

1936.*

1936.vfa_a_5c2cef4e7

1967.*

1967.1969.v205fd594c821

1967.vdea_d580c1a_b_a_

github-branch-source-0.*

github-branch-source-0.1-beta-1

github-branch-source-0.1-beta-2

github-branch-source-0.1-beta-3

github-branch-source-0.1-beta-4

github-branch-source-1.*

github-branch-source-1.0

github-branch-source-1.1

github-branch-source-1.10

github-branch-source-1.2

github-branch-source-1.3

github-branch-source-1.4

github-branch-source-1.4-beta-1

github-branch-source-1.5

github-branch-source-1.6

github-branch-source-1.7

github-branch-source-1.8

github-branch-source-1.8.1

github-branch-source-1.9

github-branch-source-2.*

github-branch-source-2.0.0

github-branch-source-2.0.0-beta-1

github-branch-source-2.0.0-beta-2

github-branch-source-2.0.1

github-branch-source-2.0.1-beta-1

github-branch-source-2.0.1-beta-2

github-branch-source-2.0.1-beta-3

github-branch-source-2.0.1-beta-4

github-branch-source-2.0.1-beta-5

github-branch-source-2.0.1-beta-6

github-branch-source-2.0.2

github-branch-source-2.0.3

github-branch-source-2.0.4

github-branch-source-2.0.4-beta-1

github-branch-source-2.0.5

github-branch-source-2.0.6

github-branch-source-2.0.7

github-branch-source-2.10.0

github-branch-source-2.10.1

github-branch-source-2.10.2

github-branch-source-2.10.3

github-branch-source-2.11.0

github-branch-source-2.11.1

github-branch-source-2.11.2

github-branch-source-2.11.3

github-branch-source-2.11.4

github-branch-source-2.11.5

github-branch-source-2.2.0

github-branch-source-2.2.0-beta-1

github-branch-source-2.2.0-beta-2

github-branch-source-2.2.1

github-branch-source-2.2.2

github-branch-source-2.2.3

github-branch-source-2.2.4

github-branch-source-2.2.5

github-branch-source-2.2.6

github-branch-source-2.3.0

github-branch-source-2.3.1

github-branch-source-2.3.2

github-branch-source-2.3.3

github-branch-source-2.3.4

github-branch-source-2.3.6

github-branch-source-2.4.0

github-branch-source-2.4.0-beta-1

github-branch-source-2.4.1

github-branch-source-2.4.2

github-branch-source-2.4.3-beta-1

github-branch-source-2.4.4

github-branch-source-2.4.5

github-branch-source-2.4.6-beta-1

github-branch-source-2.4.6-beta-2

github-branch-source-2.5.0

github-branch-source-2.5.1

github-branch-source-2.5.2

github-branch-source-2.5.3

github-branch-source-2.5.4

github-branch-source-2.5.5

github-branch-source-2.5.6

github-branch-source-2.5.7

github-branch-source-2.5.8

github-branch-source-2.6.0

github-branch-source-2.7.0

github-branch-source-2.7.0-beta1

github-branch-source-2.7.1

github-branch-source-2.7.2

github-branch-source-2.8.0

github-branch-source-2.8.2

github-branch-source-2.8.3

github-branch-source-2.9.0

github-branch-source-2.9.1

github-branch-source-2.9.2

github-branch-source-2.9.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57285.json"