What is GHSA-223m-4rfp-646h?

GHSA-223m-4rfp-646h is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins is missing a permission check in the authenticated users' profile menu

Which CVE IDs does GHSA-223m-4rfp-646h cover?

GHSA-223m-4rfp-646h covers the following CVE IDs: CVE-2025-59475. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-223m-4rfp-646h?

GHSA-223m-4rfp-646h has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-223m-4rfp-646h?

GHSA-223m-4rfp-646h affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003c 2.516.3; maven/org.jenkins-ci.main:jenkins-core:\u003e= 2.517, \u003c 2.528.

GHSA-223m-4rfp-646hMediumCVSS 4.3

Jenkins is missing a permission check in the authenticated users' profile menu

Vendor

GitHub Security Advisories

Published

September 17, 2025

Last Modified

November 5, 2025

🔗 CVE IDs covered (1)

CVE-2025-59475 →

📋 Description

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).

Jenkins 2.528, LTS 2.516.3 requires Overall/Read permission to list various items in authenticated user profile dropdown menus.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:< 2.516.3
maven/org.jenkins-ci.main:jenkins-core:>= 2.517, < 2.528

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-59475
https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3625
http://www.openwall.com/lists/oss-security/2025/09/17/1
https://github.com/advisories/GHSA-223m-4rfp-646h