medium6.6
CVE-2026-48917
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
Impact
Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:ldap | <= 807.v7d7de30930cf | 807.809.vd3a |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Ldap | through 793.v754d6b_41b_ea_4 Version 807.v7d7de30930cf |