https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:07:07.059873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21640 BIT-jenkins-2021-21640 2026-10-04T04:07:07.231795+00:00

Affected: Bitnami: jenkins

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.

 https://cve.radiocsirt.org/vuln/cnvd-2021-31174 cnvd-2021-31174 2026-10-04T04:07:07.231873+00:00 cnvd-2021-31174 https://cve.radiocsirt.org/vuln/euvd-2026-22324 EUVD-2026-22324 2026-10-04T04:07:07.231892+00:00 EUVD-2026-22324 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21640 fkie_cve-2021-21640 2026-10-04T04:07:07.231905+00:00

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.

 https://cve.radiocsirt.org/vuln/ghsa-w2hv-rcqr-2h7r GHSA-w2hv-rcqr-2h7r — View name validation bypass in Jenkins 2026-10-04T04:07:07.231928+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name. When a form to create a view is submitted, the name is included twice in the submission. One instance is validated, but the other instance is used to create the value.

This allows attackers with View/Create permission to create views with invalid or already-used names.

Jenkins 2.287, LTS 2.277.2 uses the same submitted value for validation and view creation.

 https://cve.radiocsirt.org/vuln/gsd-2021-21640 gsd-2021-21640 2026-10-04T04:07:07.231957+00:00 gsd-2021-21640 https://cve.radiocsirt.org/vuln/rhsa-2021:1551 RHSA-2021:1551 — Red Hat Security Advisory: OpenShift Container Platform 4.7.11 security and bug fix update 2026-10-04T04:07:07.231969+00:00

golang: math/big: panic during recursive division of very large numbers golang: crypto/elliptic: incorrect operations on the P-224 curve jenkins: lack of type validation in agent related REST API jenkins: view name validation bypass jetty: Symlink directory exposes webapp directory contents jetty: Resource exhaustion when receiving an invalid large TLS frame