https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:14:50.263778+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53521 EUVD-2026-53521 2026-10-03T23:14:50.623515+00:00 EUVD-2026-53521 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10300 fkie_cve-2019-10300 2026-10-03T23:14:50.623559+00:00

A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-j365-62px-vjjv GHSA-j365-62px-vjjv — Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability 2026-10-03T23:14:50.623596+00:00

Affected: Maven: org.jenkins-ci.plugins:gitlab-plugin

Jenkins GitLab Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Additionally, this form validation method did not require POST requests, resulting in a cross-site request forgery vulnerability.

This form validation method now requires POST requests and Overall/Administer permissions.

 https://cve.radiocsirt.org/vuln/gsd-2019-10300 gsd-2019-10300 2026-10-03T23:14:50.623627+00:00 gsd-2019-10300