https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:31:34.797079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-28235 cnvd-2019-28235 2026-10-02T19:31:34.860949+00:00 cnvd-2019-28235 https://cve.radiocsirt.org/vuln/euvd-2026-53623 EUVD-2026-53623 2026-10-02T19:31:34.860985+00:00 EUVD-2026-53623 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10372 fkie_cve-2019-10372 2026-10-02T19:31:34.860999+00:00

An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.

 https://cve.radiocsirt.org/vuln/ghsa-pg59-2w33-8vmc GHSA-pg59-2w33-8vmc — Jenkins Gitlab Authentication Plugin Open Redirect vulnerability 2026-10-02T19:31:34.861029+00:00

Affected: Maven: org.jenkins-ci.plugins:gitlab-oauth

GitLab Authentication Plugin records the HTTP `Referer` header when the authentication process starts and redirects users to that URL when the user has finished logging in.

This implements an open redirect, allowing malicious sites to implement a phishing attack, with users expecting they have just logged in to Jenkins.

 https://cve.radiocsirt.org/vuln/gsd-2019-10372 gsd-2019-10372 2026-10-02T19:31:34.861054+00:00 gsd-2019-10372