https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T13:10:56.417447+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-36577 cnvd-2021-36577 2026-10-18T13:10:56.420984+00:00 cnvd-2021-36577 https://cve.radiocsirt.org/vuln/euvd-2026-22340 EUVD-2026-22340 2026-10-18T13:10:56.421020+00:00 EUVD-2026-22340 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21652 fkie_cve-2021-21652 2026-10-18T13:10:56.421035+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-rrvg-2c69-p9rf GHSA-rrvg-2c69-p9rf — CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials 2026-10-18T13:10:56.421063+00:00

Affected: Maven: org.jenkins-ci.plugins:xray-connector

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not require POST requests for a connection test method, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Jenkins Xray - Test Management for Jira Plugin 2.4.1 requires POST requests for the affected connection test method.

 https://cve.radiocsirt.org/vuln/gsd-2021-21652 gsd-2021-21652 2026-10-18T13:10:56.421090+00:00 gsd-2021-21652