https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T02:06:28.126768+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-01879 cnvd-2019-01879 2026-10-22T02:06:28.130049+00:00 cnvd-2019-01879 https://cve.radiocsirt.org/vuln/euvd-2026-71139 EUVD-2026-71139 2026-10-22T02:06:28.130080+00:00 EUVD-2026-71139 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000412 fkie_cve-2018-1000412 2026-10-22T02:06:28.130094+00:00

An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read access to have Jenkins connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-fpg6-xqj4-j7wf GHSA-fpg6-xqj4-j7wf — Jenkins Jira Plugin Incorrect Authorization vulnerability 2026-10-22T02:06:28.130123+00:00

Affected: Maven: org.jenkins-ci.plugins:jira

An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read access to have Jenkins connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. In version 3.0.2, this form validation method requires POST requests and Overall/Administer (for globally defined sites) or Item/Configure permissions (for sites defined for a folder).

 https://cve.radiocsirt.org/vuln/gsd-2018-1000412 gsd-2018-1000412 2026-10-22T02:06:28.130149+00:00 gsd-2018-1000412