https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T06:43:25.675724+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05675 bdu:2020-05675 2026-10-16T06:43:25.681364+00:00 bdu:2020-05675 https://cve.radiocsirt.org/vuln/cnvd-2020-20420 cnvd-2020-20420 2026-10-16T06:43:25.681396+00:00 cnvd-2020-20420 https://cve.radiocsirt.org/vuln/euvd-2026-35803 EUVD-2026-35803 2026-10-16T06:43:25.681411+00:00 EUVD-2026-35803 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2171 fkie_cve-2020-2171 2026-10-16T06:43:25.681423+00:00

Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-g7w4-r4mg-gvhx GHSA-g7w4-r4mg-gvhx — XXE vulnerability in Jenkins RapidDeploy Plugin 2026-10-16T06:43:25.681449+00:00

Affected: Maven: org.jenkins-ci.plugins:rapiddeploy-jenkins

RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows a user able to control the input files for the 'RapidDeploy deployment package build' build or post-build step to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller, server-side request forgery, or denial-of-service attacks.

RapidDeploy Plugin 4.2.1 disables external entity resolution for its XML parser.

 https://cve.radiocsirt.org/vuln/gsd-2020-2171 gsd-2020-2171 2026-10-16T06:43:25.681479+00:00 gsd-2020-2171