https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T08:38:05.862159+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-61626 cnvd-2020-61626 2026-10-17T08:38:05.905960+00:00 cnvd-2020-61626 https://cve.radiocsirt.org/vuln/euvd-2026-35992 EUVD-2026-35992 2026-10-17T08:38:05.906034+00:00 EUVD-2026-35992 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2303 fkie_cve-2020-2303 2026-10-17T08:38:05.906059+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.

 https://cve.radiocsirt.org/vuln/ghsa-2wf5-4mf7-vmh3 GHSA-2wf5-4mf7-vmh3 — CSRF vulnerability in Jenkins Active Directory Plugin 2026-10-17T08:38:05.906125+00:00

Affected: Maven: org.jenkins-ci.plugins:active-directory

Jenkins Active Directory Plugin 2.19 and earlier does not require POST requests for multiple HTTP endpoints implementing connection and authentication tests, resulting in cross-site request forgery (CSRF) vulnerabilities.

This vulnerability allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.

Active Directory Plugin 2.20 requires POST requests for the affected HTTP endpoints.

 https://cve.radiocsirt.org/vuln/gsd-2020-2303 gsd-2020-2303 2026-10-17T08:38:05.906183+00:00 gsd-2020-2303