https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:48:16.954645+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21605 BIT-jenkins-2021-21605 2026-10-03T16:48:17.033317+00:00

Affected: Bitnami: jenkins

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.

 https://cve.radiocsirt.org/vuln/cnvd-2021-03561 cnvd-2021-03561 2026-10-03T16:48:17.033399+00:00 cnvd-2021-03561 https://cve.radiocsirt.org/vuln/euvd-2026-22292 EUVD-2026-22292 2026-10-03T16:48:17.033419+00:00 EUVD-2026-22292 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21605 fkie_cve-2021-21605 2026-10-03T16:48:17.033431+00:00

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.

 https://cve.radiocsirt.org/vuln/ghsa-pxgq-gqr9-5gwx GHSA-pxgq-gqr9-5gwx — Path traversal vulnerability in Jenkins agent names 2026-10-03T16:48:17.033453+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override unrelated `config.xml` files. If the global `config.xml` file is replaced, Jenkins will start up with unsafe legacy defaults after a restart.

Jenkins 2.275, LTS 2.263.2 ensures that agent names are considered valid names for items to prevent this problem.

In case of problems, this change can be reverted by setting the [Java system property](https://www.jenkins.io/doc/book/managing/system-properties/) `jenkins.model.Nodes.enforceNameRestrictions` to `false`.

 https://cve.radiocsirt.org/vuln/gsd-2021-21605 gsd-2021-21605 2026-10-03T16:48:17.033481+00:00 gsd-2021-21605 https://cve.radiocsirt.org/vuln/rhsa-2021:0423 RHSA-2021:0423 — Red Hat Security Advisory: OpenShift Container Platform 4.6.17 security and packages update 2026-10-03T16:48:17.033492+00:00

ant: insecure temporary file vulnerability ant: insecure temporary file jenkins: Arbitrary file read vulnerability in workspace browsers jenkins: XSS vulnerability in notification bar jenkins: Improper handling of REST API XML deserialization errors jenkins: Path traversal vulnerability in agent names jenkins: Arbitrary file existence check in file fingerprints jenkins: Excessive memory allocation in graph URLs leads to denial of service jenkins: Stored XSS vulnerability in button labels jenkins: Missing permission check for paths with specific prefix jenkins: Reflected XSS vulnerability in markup formatter preview jenkins: Stored XSS vulnerability on new item page jenkins: Filesystem traversal by privileged users