3 matches found
CVE-2026-48917
The Jenkins LDAP Plugin (version 807.v7d7de30930cf and earlier) is vulnerable to insecure deserialization because it follows LDAP referrals without validation. An attacker who controls the configured LDAP server or performs a machine-in-the-middle attack can redirect the plugin to an RMI URL, cau...
6.6CVSS5.8AI score0.00433EPSS
SaveExploits0References1Affected Software1
20