{"id":"CVE-2026-57285","details":"A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.","modified":"2026-07-15T06:09:47.227683Z","published":"2026-06-24T14:17:34.450Z","references":[{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3808"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/github-branch-source-plugin","events":[{"introduced":"0"},{"last_affected":"205fd594c821faaff1a66fedfa7e10973291d70c"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:github_branch_source:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1967.1969.v205fd594c821"}],"source":"CPE_RANGE"}}],"versions":["1967.1969.v205fd594c821","1967.vdea_d580c1a_b_a_","1936.vfa_a_5c2cef4e7","1934.v23cf60a_47fc3","1925.v62fb_7ffb_08ce","1917.v9ee8a_39b_3d0d","1911.vc09e01781005","1910.v4ca_b_2c639cb_0","1906.v21c5c13d25c6","1871.v50ffb_786515e","1869.vdb_846d75405b_","1864.v411feec5e78e","1862.v1a_fc22a_d3788","1848.v42f74f7f4500","1844.v4a_9883d49126","1834.v857721ea_74c6","1833.v77b_6542df5a_8","1824.v046257273408","1822.v9eec8e5e69e3","1815.v9152b_2ff7a_1b_","1810.v913311241fa_9","1809.v088b_5f22c768","1807.v50351eb_7dd13","1803.v98e3d8a_c8169","1797.v86fdb_4d57d43","1793.v1831e9c68d77","1790.v5a_7859812c8d","1789.v5b_0c0cea_18c3","1787.v8b_8cd49a_f8f1","1785.v99802b_69816c","1781.va_153cda_09d1b_","1772.va_69eda_d018d4","1771.v59b_6a_fa_1b_89e","1767.va_7d01ea_c7256","1758.v048414714f5d","1755.vcdb_d136f3b_25","1752.vc201a_0235d80","1740.v51d5810e9e8c","1751.v90e17c48a_6a_c","1750.v6b_fb_8df8f985","1748.v6b_61a_1dc35b_4","1741.va_3028eb_9fd21","1734.v8a_ed3a_653490","1732.v3f1889a_c475b_","1730.vff97c8a_1f804","1728.v859147241f49","1725.vd391eef681a_e","1703.vd5a_2b_29c6cdc","1701.v00cc8184df93","1696.v3a_7603564d04","1695.v88de84e9f6b_9","1694.vd46793a_c4a_57","1687.v7618247e672d","1677.v731f745ea_0cf","1656.v77eddb_b_e95df","1637.vd833b_7ca_7654","1628.vb_2f51293cb_78","1619.v962f131fa_c15","1602.vfe89fe441b_36","1599.v9fb_798a_a_7c4f","1598.v91207e9f9b_4a_","1583.v18d333ef7379","1577.v83564088883f","github-branch-source-2.11.5","github-branch-source-2.11.4","github-branch-source-2.11.3","github-branch-source-2.11.2","github-branch-source-2.11.1","github-branch-source-2.11.0","github-branch-source-2.10.3","github-branch-source-2.10.2","github-branch-source-2.10.1","github-branch-source-2.10.0","github-branch-source-2.9.3","github-branch-source-2.9.2","github-branch-source-2.9.1","github-branch-source-2.9.0","github-branch-source-2.8.3","github-branch-source-2.8.2","github-branch-source-2.8.0","github-branch-source-2.7.2","github-branch-source-2.7.1","github-branch-source-2.7.0","github-branch-source-2.7.0-beta1","github-branch-source-2.6.0","github-branch-source-2.5.8","github-branch-source-2.5.7","github-branch-source-2.5.6","github-branch-source-2.5.5","github-branch-source-2.5.4","github-branch-source-2.5.3","github-branch-source-2.5.2","github-branch-source-2.5.1","github-branch-source-2.5.0","github-branch-source-2.4.6-beta-2","github-branch-source-2.4.6-beta-1","github-branch-source-2.4.5","github-branch-source-2.4.4","github-branch-source-2.4.3-beta-1","github-branch-source-2.4.2","github-branch-source-2.4.1","github-branch-source-2.4.0","github-branch-source-2.4.0-beta-1","github-branch-source-2.3.6","github-branch-source-2.3.4","github-branch-source-2.3.3","github-branch-source-2.3.2","github-branch-source-2.3.1","github-branch-source-2.3.0","github-branch-source-2.2.6","github-branch-source-2.2.5","github-branch-source-2.2.4","github-branch-source-2.2.3","github-branch-source-2.2.2","github-branch-source-2.2.1","github-branch-source-2.2.0","github-branch-source-2.2.0-beta-2","github-branch-source-2.2.0-beta-1","github-branch-source-2.0.7","github-branch-source-2.0.6","github-branch-source-2.0.5","github-branch-source-2.0.4","github-branch-source-2.0.4-beta-1","github-branch-source-2.0.3","github-branch-source-2.0.2","github-branch-source-2.0.1","github-branch-source-2.0.1-beta-6","github-branch-source-2.0.1-beta-5","github-branch-source-2.0.1-beta-4","github-branch-source-2.0.1-beta-3","github-branch-source-2.0.1-beta-2","github-branch-source-2.0.1-beta-1","github-branch-source-2.0.0","github-branch-source-2.0.0-beta-2","github-branch-source-2.0.0-beta-1","github-branch-source-1.10","github-branch-source-1.9","github-branch-source-1.8.1","github-branch-source-1.8","github-branch-source-1.7","github-branch-source-1.6","github-branch-source-1.5","github-branch-source-1.4","github-branch-source-1.4-beta-1","github-branch-source-1.3","github-branch-source-1.2","github-branch-source-1.1","github-branch-source-1.0","github-branch-source-0.1-beta-4","github-branch-source-0.1-beta-3","github-branch-source-0.1-beta-2","github-branch-source-0.1-beta-1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-57285.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}