https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:25:21.248107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2020-2230 BIT-jenkins-2020-2230 2026-10-03T12:25:21.378735+00:00

Affected: Bitnami: jenkins

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

 https://cve.radiocsirt.org/vuln/cnvd-2020-46299 cnvd-2020-46299 2026-10-03T12:25:21.378789+00:00 cnvd-2020-46299 https://cve.radiocsirt.org/vuln/euvd-2026-35906 EUVD-2026-35906 2026-10-03T12:25:21.378807+00:00 EUVD-2026-35906 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2230 fkie_cve-2020-2230 2026-10-03T12:25:21.378819+00:00

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

 https://cve.radiocsirt.org/vuln/ghsa-9g4m-ffx6-c29g GHSA-9g4m-ffx6-c29g — Jenkins Cross-site Scripting vulnerability in project naming strategy 2026-10-03T12:25:21.378840+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, that is displayed on item creation.\n\nThis results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.\n\nJenkins 2.252, LTS 2.235.4 escapes the project naming strategy description.

 https://cve.radiocsirt.org/vuln/gsd-2020-2230 gsd-2020-2230 2026-10-03T12:25:21.378863+00:00 gsd-2020-2230 https://cve.radiocsirt.org/vuln/rhsa-2020:3808 RHSA-2020:3808 — Red Hat Security Advisory: OpenShift Container Platform 4.3.38 jenkins and openshift security update 2026-10-03T12:25:21.378875+00:00

jetty: double release of resource can lead to information disclosure jenkins: Stored XSS vulnerability in job build time trend jenkins: Stored XSS vulnerability in upstream cause jenkins: Stored XSS vulnerability in 'keep forever' badge icons jenkins: Stored XSS vulnerability in console links jenkins: user-specified tooltip values leads to stored cross-site scripting jenkins: stored XSS vulnerability in project naming strategy jenkins: stored XSS vulnerability in 'trigger builds remotely' kubernetes: Node disk DOS by writing to container /etc/hosts