CVE-2026-91993Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list

Açıklama

Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository existence, determine repository type, and execute git ls-remote commands using other workspaces' stored credentials.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• GitHub Issue #115 issue-trackingexploitExploitIssue Tracking
• BuildInfoController.branchList at v2.11.12 technical-descriptionProduct
• https://github.com/dromara/Jpom productProduct
• VulnCheck Advisory: Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list third-party-advisoryThird Party Advisory