Jenkins Project Jenkins LDAP Plugin

• CVE-2026-84662 Medium 4.3 Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL. 0.3%
• CVE-2026-48917 Medium 6.6 Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation. 0.3%
• CVE-2026-48916 Medium 6.6 Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. 0.3%
• CVE-2023-32978 Medium 4.3 A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials. 0.3%