Jenkins GitHub Integration Plugin
Moderate fix1 remedy
cpe:2.3:a:jenkins:github_pull_request_builder:*:*:*:*:jenkins:*:*
Moderate fix1 remedy
- <= 0.7.3
Jenkins GitHub Integration Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
Patched
A cross-site request forgery (CSRF) vulnerability exists in Jenkins GitHub Integration Plugin versions through 0.7.3. This vulnerability allows attackers to trigger builds for pull requests by exploiting the lack of proper request validation.
Impact
Exploitation of this vulnerability allows for unauthorized triggering of builds on Jenkins pull requests, potentially leading to unintended code execution or integration issues.
Remediation
Users of Jenkins GitHub Integration Plugin should update to version 0.7.4, which addresses this vulnerability by requiring POST requests for the affected HTTP endpoint.
Added: May 27, 2026, 4:06 PM
Updated: May 27, 2026, 4:06 PM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
0.6exploitability
6.2remediation
7.7relevance
9.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.