CVE-2026-48925

The Jenkins GitHub Integration Plugin (versions 0.7.3 and earlier ) is vulnerable to a cross-site request forgery (CSRF) . The root cause is that the plugin fails to require POST requests for a specific HTTP endpoint, allowing an attacker to trick an authenticated user into submitting a malicious...