CVE-2026-57297

Maven/org.jenkins-ci.plugins:contrast-continuous-application-security CVE-2026-57297: medium 4.3, EPSS 0.25%

Jenkins Contrast Continuous Application Security Plugin has a missing permission check

Action: Upgrade org.jenkins-ci.plugins:contrast-continuous-application-security to 3.12 or later.

Affected

Fixed versions

Sources

• osv: GHSA-p44q-fmwr-jqr7
• https://nvd.nist.gov/vuln/detail/CVE-2026-57297
• https://github.com/jenkinsci/contrast-continuous-application-security-plugin/commit/ddea0a815aec52c0695d8c0c7f09f9cfce4989e5
• https://github.com/jenkinsci/contrast-continuous-application-security-plugin
• https://github.com/jenkinsci/contrast-continuous-application-security-plugin/releases/tag/contrast-continuous-application-security-3.12
• https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3697%20(1)

CVE-2026-57297 · published 2026-06-24T15:31:47Z · modified 2026-09-25T19:15:04.533348168Z · JSON