https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:45:57.915773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53512 EUVD-2026-53512 2026-10-05T07:45:57.979172+00:00 EUVD-2026-53512 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10301 fkie_cve-2019-10301 2026-10-05T07:45:57.979208+00:00

A missing permission check in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfig#doTestConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-923w-9p3x-hmgw GHSA-923w-9p3x-hmgw — Jenkins GitLab Plugin missing permission checks 2026-10-05T07:45:57.979252+00:00

Affected: Maven: org.jenkins-ci.plugins:gitlab-plugin

Jenkins GitLab Plugin did not perform permission checks on a method implementing form validation. This allowed users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Additionally, this form validation method did not require POST requests, resulting in a cross-site request forgery vulnerability.

This form validation method now requires POST requests and Overall/Administer permissions.

 https://cve.radiocsirt.org/vuln/gsd-2019-10301 gsd-2019-10301 2026-10-05T07:45:57.979280+00:00 gsd-2019-10301