Jenkins Contrast Continuous Application Security Plugin vulnerabilities
3 known CVE vulnerabilities in Jenkins Contrast Continuous Application Security Plugin, translated and rated.
- CVE-2026-57299Medium
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
- CVE-2026-57298Medium
The Jenkins Contrast Continuous Application Security Plugin version 3.11 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to force Jenkins to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.
- CVE-2026-57297Medium
A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.