medium6.6
CVE-2026-48919
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.
Impact
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:active-directory | < 2.41.1 | 2.41.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Active Directory | through 2.41 |