https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T02:26:46.436361+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22368 EUVD-2026-22368 2026-10-25T02:26:46.439500+00:00 EUVD-2026-22368 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21674 fkie_cve-2021-21674 2026-10-25T02:26:46.439530+00:00

A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests.

 https://cve.radiocsirt.org/vuln/ghsa-c4c3-3cgh-vvrh GHSA-c4c3-3cgh-vvrh — Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests 2026-10-25T02:26:46.439559+00:00

Affected: Maven: org.jenkins-ci.plugins:requests

Jenkins requests-plugin Plugin 2.2.6 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to view the list of pending requests.

Jenkins requests-plugin Plugin 2.2.7 requires Overall/Administer permission to view the list of pending requests.

The previous sentence originally stated that Overall/Read permission was newly required. This statement was incorrect and has been fixed on 2021-07-05.

 https://cve.radiocsirt.org/vuln/gsd-2021-21674 gsd-2021-21674 2026-10-25T02:26:46.439586+00:00 gsd-2021-21674