CVE-2026-42523

Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission.

CVSS v3 9.0 CRITICAL

9.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3704	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:github:*:*:*:*:*:jenkins:*:*

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) El Plugin de GitHub de Jenkins 1.46.0 y anteriores procesa incorrectamente la URL del trabajo actual como parte de JavaScript que implementa la validación de la característica ’activador de webhook de GitHub para sondeo de GITScm’, lo que resulta en una vulnerabilidad de cross-site scripting (XSS) almacenado explotable por atacantes no anónimos con permiso General/Lectura.

Information

Published : 2026-04-29 14:16

Updated : 2026-10-26 20:10

NVD link : CVE-2026-42523

Mitre link : CVE-2026-42523

CVE.ORG link : CVE-2026-42523

JSON object : View

Products Affected

jenkins

github

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2026-42523", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42523", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-29T14:29:18.837762Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "jenkinsci-cert@googlegroups.com", "affectedData": [{"vendor": "Jenkins Project", "product": "Jenkins GitHub Plugin", "versions": [{"status": "affected", "version": "0", "versionType": "maven", "lessThanOrEqual": "1.46.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-29T14:16:19.360", "references": [{"url": "https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3704", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature \"GitHub hook trigger for GITScm polling\", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission."}, {"lang": "es", "value": "El Plugin de GitHub de Jenkins 1.46.0 y anteriores procesa incorrectamente la URL del trabajo actual como parte de JavaScript que implementa la validaci\u00f3n de la caracter\u00edstica \u2019activador de webhook de GitHub para sondeo de GITScm\u2019, lo que resulta en una vulnerabilidad de cross-site scripting (XSS) almacenado explotable por atacantes no an\u00f3nimos con permiso General/Lectura."}], "lastModified": "2026-10-26T20:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:github:*:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "162727B7-EF1E-4E69-A191-1F9DDE585A37", "versionEndExcluding": "1.46.0.1"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}