CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. It affects Jenkins.
CVE
CVE-2026-57303
Severity
HIGH
CVSS
7.1
EPSS
0.22%
Jenkins
Original NVD Description
Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.
Related CVEs
Other vulnerabilities affecting the same vendor(s)