What is GHSA-xv7v-hw45-9jgw?

GHSA-xv7v-hw45-9jgw is a security advisory published by GitHub Security Advisories with Low severity. Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that...

Which CVE IDs does GHSA-xv7v-hw45-9jgw cover?

GHSA-xv7v-hw45-9jgw covers the following CVE IDs: CVE-2026-70430. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xv7v-hw45-9jgw?

GHSA-xv7v-hw45-9jgw has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-xv7v-hw45-9jgwLowCVSS 2.7

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-70430 →

📋 Description

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-70430
https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3916
https://github.com/advisories/GHSA-xv7v-hw45-9jgw