Assembla vulnerabilities

2 known vulnerabilities in Assembla from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Jenkins Assembla Plugin: Server-Side Request Forgery

  CVE-2026-57303Jun 24, 2026Jenkins

  Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform

• 8.8 High severity

  Jenkins Assembla Auth Plugin: Cross-Site Request Forgery

  CVE-2023-37961Jul 12, 2023Jenkins

  A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account.