medium4.3
CVE-2026-48925
A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a…
Impact
A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:github-integration-parent | <= 0.7.3 | 0.7.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kostyasha | Github Integration | before 0.7.4 |