https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:10:49.951139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21608 BIT-jenkins-2021-21608 2026-10-03T12:10:50.045612+00:00

Affected: Bitnami: jenkins

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to control button labels.

 https://cve.radiocsirt.org/vuln/cnvd-2021-03557 cnvd-2021-03557 2026-10-03T12:10:50.045717+00:00 cnvd-2021-03557 https://cve.radiocsirt.org/vuln/euvd-2026-22297 EUVD-2026-22297 2026-10-03T12:10:50.045736+00:00 EUVD-2026-22297 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21608 fkie_cve-2021-21608 2026-10-03T12:10:50.045748+00:00

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to control button labels.

 https://cve.radiocsirt.org/vuln/ghsa-wv63-gwr9-5c55 GHSA-wv63-gwr9-5c55 — Stored XSS vulnerability in Jenkins button labels 2026-10-03T12:10:50.045770+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI.

This results in a cross-site scripting vulnerability exploitable by attackers with the ability to control button labels. An example of buttons with a user-controlled label are the buttons of the Pipeline `input` step.

Jenkins 2.275, LTS 2.263.2 escapes button labels in the Jenkins UI.

 https://cve.radiocsirt.org/vuln/gsd-2021-21608 gsd-2021-21608 2026-10-03T12:10:50.045796+00:00 gsd-2021-21608 https://cve.radiocsirt.org/vuln/rhsa-2021:0423 RHSA-2021:0423 — Red Hat Security Advisory: OpenShift Container Platform 4.6.17 security and packages update 2026-10-03T12:10:50.045807+00:00

ant: insecure temporary file vulnerability ant: insecure temporary file jenkins: Arbitrary file read vulnerability in workspace browsers jenkins: XSS vulnerability in notification bar jenkins: Improper handling of REST API XML deserialization errors jenkins: Path traversal vulnerability in agent names jenkins: Arbitrary file existence check in file fingerprints jenkins: Excessive memory allocation in graph URLs leads to denial of service jenkins: Stored XSS vulnerability in button labels jenkins: Missing permission check for paths with specific prefix jenkins: Reflected XSS vulnerability in markup formatter preview jenkins: Stored XSS vulnerability on new item page jenkins: Filesystem traversal by privileged users