A vulnerability classified as critical has been found in Assembla Plugin up to 1.4 on Jenkins. This issue affects some unknown processing of the component XML Parser . This manipulation causes server-side request forgery. This vulnerability is tracked as CVE-2026-57303 . The attack is possible to be carried out remotely. No exploit exists.