CSRF Vulnerability in Jenkins SCM-Manager Plugin

CVE-2026-70434

What is CVE-2026-70434?

A Cross-Site Request Forgery (CSRF) vulnerability in versions of the Jenkins SCM-Manager Plugin prior to 1.11.1 allows attackers to exploit users' credentials. By tricking a user into connecting to a malicious URL with specified credential IDs, attackers can capture sensitive information stored in Jenkins. This vulnerability emphasizes the need for robust security measures against unauthorized access and credential manipulation.

References