Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:ldap

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Maven Central

Advisories 3

  • CVE-2026-48917Medium 6.6

    Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation.

    Affected: fixed in 807.809.vd3a.

  • CVE-2026-48916Medium 6.6

    Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals.

    Affected: fixed in 807.809.vd3a.

  • CVE-2023-32978Medium 4.3

    A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server…

    Affected: fixed in 676.vfa.