https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T22:50:32.855983+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53723 EUVD-2026-53723 2026-10-17T22:50:32.858698+00:00 EUVD-2026-53723 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10464 fkie_cve-2019-10464 2026-10-17T22:50:32.858730+00:00

A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.

 https://cve.radiocsirt.org/vuln/ghsa-6x2w-gwgf-5rg3 GHSA-6x2w-gwgf-5rg3 — Jenkins Deploy WebLogic Plugin cross-site request forgery vulnerability 2026-10-17T22:50:32.858760+00:00

Affected: Maven: org.jenkins-ci.plugins:weblogic-deployer-plugin

JenkinsDeploy WebLogic Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to send an HTTP HEAD request to a user-specified URL, or confirm the existence of any file or directory on the Jenkins controller.

Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/gsd-2019-10464 gsd-2019-10464 2026-10-17T22:50:32.858786+00:00 gsd-2019-10464