https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:15:32.067671+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53524 EUVD-2026-53524 2026-10-02T15:15:32.071056+00:00 EUVD-2026-53524 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10304 fkie_cve-2019-10304 2026-10-02T15:15:32.071100+00:00

A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.

 https://cve.radiocsirt.org/vuln/ghsa-grpp-gx5h-pvh8 GHSA-grpp-gx5h-pvh8 — Jenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF) 2026-10-02T15:15:32.071149+00:00

Affected: Maven: com.xebialabs.deployit.ci:deployit-plugin

A missing permission check in a form validation method in Jenkins XebiaLabs XL Deploy Plugin allows users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified credentials.

Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2019-10304 gsd-2019-10304 2026-10-02T15:15:32.071195+00:00 gsd-2019-10304