Jenkins Project Jenkins Job Import Plugin

• CVE-2026-48926 Medium 4.3 Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of crede 0.2%
• CVE-2022-43413 Medium 4.3 Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in 0.7%