Medium
Security advisory
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-57285
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 17:12 UTC · Revision 1
Source evidence
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.
osv:CVE-2026-57285
Complete source record
{
"id": "92498a988b314801ba8e57b7017a57ceedb7ed6b21074ff7c9efe52567ff8e31",
"url": "https://osv.dev/vulnerability/CVE-2026-57285",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2026-57285",
"summary": "A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.",
"evidence": "osv:CVE-2026-57285",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2026-57285",
"aliases": [
"CVE-2026-57285",
"GHSA-g7c6-wxjf-8564"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/jenkinsci/github-branch-source-plugin",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "205fd594c821faaff1a66fedfa7e10973291d70c"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:jenkins:github_branch_source:*:*:*:*:*:jenkins:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "1967.1969.v205fd594c821"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"1967.1969.v205fd594c821",
"1967.vdea_d580c1a_b_a_",
"1936.vfa_a_5c2cef4e7",
"1934.v23cf60a_47fc3",
"1925.v62fb_7ffb_08ce",
"1917.v9ee8a_39b_3d0d",
"1911.vc09e01781005",
"1910.v4ca_b_2c639cb_0",
"1906.v21c5c13d25c6",
"1871.v50ffb_786515e",
"1869.vdb_846d75405b_",
"1864.v411feec5e78e",
"1862.v1a_fc22a_d3788",
"1848.v42f74f7f4500",
"1844.v4a_9883d49126",
"1834.v857721ea_74c6",
"1833.v77b_6542df5a_8",
"1824.v046257273408",
"1822.v9eec8e5e69e3",
"1815.v9152b_2ff7a_1b_",
"1810.v913311241fa_9",
"1809.v088b_5f22c768",
"1807.v50351eb_7dd13",
"1803.v98e3d8a_c8169",
"1797.v86fdb_4d57d43",
"1793.v1831e9c68d77",
"1790.v5a_7859812c8d",
"1789.v5b_0c0cea_18c3",
"1787.v8b_8cd49a_f8f1",
"1785.v99802b_69816c",
"1781.va_153cda_09d1b_",
"1772.va_69eda_d018d4",
"1771.v59b_6a_fa_1b_89e",
"1767.va_7d01ea_c7256",
"1758.v048414714f5d",
"1755.vcdb_d136f3b_25",
"1752.vc201a_0235d80",
"1740.v51d5810e9e8c",
"1751.v90e17c48a_6a_c",
"1750.v6b_fb_8df8f985",
"1748.v6b_61a_1dc35b_4",
"1741.va_3028eb_9fd21",
"1734.v8a_ed3a_653490",
"1732.v3f1889a_c475b_",
"1730.vff97c8a_1f804",
"1728.v859147241f49",
"1725.vd391eef681a_e",
"1703.vd5a_2b_29c6cdc",
"1701.v00cc8184df93",
"1696.v3a_7603564d04",
"1695.v88de84e9f6b_9",
"1694.vd46793a_c4a_57",
"1687.v7618247e672d",
"1677.v731f745ea_0cf",
"1656.v77eddb_b_e95df",
"1637.vd833b_7ca_7654",
"1628.vb_2f51293cb_78",
"1619.v962f131fa_c15",
"1602.vfe89fe441b_36",
"1599.v9fb_798a_a_7c4f",
"1598.v91207e9f9b_4a_",
"1583.v18d333ef7379",
"1577.v83564088883f",
"github-branch-source-2.11.5",
"github-branch-source-2.11.4",
"github-branch-source-2.11.3",
"github-branch-source-2.11.2",
"github-branch-source-2.11.1",
"github-branch-source-2.11.0",
"github-branch-source-2.10.3",
"github-branch-source-2.10.2",
"github-branch-source-2.10.1",
"github-branch-source-2.10.0",
"github-branch-source-2.9.3",
"github-branch-source-2.9.2",
"github-branch-source-2.9.1",
"github-branch-source-2.9.0",
"github-branch-source-2.8.3",
"github-branch-source-2.8.2",
"github-branch-source-2.8.0",
"github-branch-source-2.7.2",
"github-branch-source-2.7.1",
"github-branch-source-2.7.0",
"github-branch-source-2.7.0-beta1",
"github-branch-source-2.6.0",
"github-branch-source-2.5.8",
"github-branch-source-2.5.7",
"github-branch-source-2.5.6",
"github-branch-source-2.5.5",
"github-branch-source-2.5.4",
"github-branch-source-2.5.3",
"github-branch-source-2.5.2",
"github-branch-source-2.5.1",
"github-branch-source-2.5.0",
"github-branch-source-2.4.6-beta-2",
"github-branch-source-2.4.6-beta-1",
"github-branch-source-2.4.5",
"github-branch-source-2.4.4",
"github-branch-source-2.4.3-beta-1",
"github-branch-source-2.4.2",
"github-branch-source-2.4.1",
"github-branch-source-2.4.0",
"github-branch-source-2.4.0-beta-1",
"github-branch-source-2.3.6",
"github-branch-source-2.3.4",
"github-branch-source-2.3.3",
"github-branch-source-2.3.2",
"github-branch-source-2.3.1",
"github-branch-source-2.3.0",
"github-branch-source-2.2.6",
"github-branch-source-2.2.5",
"github-branch-source-2.2.4",
"github-branch-source-2.2.3",
"github-branch-source-2.2.2",
"github-branch-source-2.2.1",
"github-branch-source-2.2.0",
"github-branch-source-2.2.0-beta-2",
"github-branch-source-2.2.0-beta-1",
"github-branch-source-2.0.7",
"github-branch-source-2.0.6",
"github-branch-source-2.0.5",
"github-branch-source-2.0.4",
"github-branch-source-2.0.4-beta-1",
"github-branch-source-2.0.3",
"github-branch-source-2.0.2",
"github-branch-source-2.0.1",
"github-branch-source-2.0.1-beta-6",
"github-branch-source-2.0.1-beta-5",
"github-branch-source-2.0.1-beta-4",
"github-branch-source-2.0.1-beta-3",
"github-branch-source-2.0.1-beta-2",
"github-branch-source-2.0.1-beta-1",
"github-branch-source-2.0.0",
"github-branch-source-2.0.0-beta-2",
"github-branch-source-2.0.0-beta-1",
"github-branch-source-1.10",
"github-branch-source-1.9",
"github-branch-source-1.8.1",
"github-branch-source-1.8",
"github-branch-source-1.7",
"github-branch-source-1.6",
"github-branch-source-1.5",
"github-branch-source-1.4",
"github-branch-source-1.4-beta-1",
"github-branch-source-1.3",
"github-branch-source-1.2",
"github-branch-source-1.1",
"github-branch-source-1.0",
"github-branch-source-0.1-beta-4",
"github-branch-source-0.1-beta-3",
"github-branch-source-0.1-beta-2",
"github-branch-source-0.1-beta-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57285.json"
}
}
],
"modified": "2026-10-27T02:31:01.405708688Z",
"provider": "osv",
"references": [
"https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3808"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2026-57285",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 460071,
"published_at": "2026-06-24T14:17:34.45+00:00"
}