Findings

CVE-2026-48925

A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

Published May 27, 2026 · updated Oct 14, 2026 · kostyasha github integration

A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

Timeline

Detection, updates, and resolution for this record.

  1. May 27, 2026 · NIST NVD

    Detected

    A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

Affected

  • cpe kostyasha/github integrationversion unspecified

Sources

  • CVE.orgCVE-2026-48925

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2026-48925

    A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

    nvd.nist.gov

References

CVE-2026-48925 · ZeroDay Findings