https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:47:55.351265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-103091 cnvd-2021-103091 2026-10-03T16:47:55.470302+00:00 cnvd-2021-103091 https://cve.radiocsirt.org/vuln/euvd-2026-22350 EUVD-2026-22350 2026-10-03T16:47:55.470364+00:00 EUVD-2026-22350 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21698 fkie_cve-2021-21698 2026-10-03T16:47:55.470379+00:00

Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.

 https://cve.radiocsirt.org/vuln/ghsa-q58j-fhj7-j6fg GHSA-q58j-fhj7-j6fg — Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files 2026-10-03T16:47:55.470412+00:00

Affected: Maven: org.jenkins-ci.plugins:subversion

Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.

This allows attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

Subversion Plugin 2.15.1 checks for the presence of and prohibits directory separator characters as part of the file name, restricting it to the intended directory.

 https://cve.radiocsirt.org/vuln/gsd-2021-21698 gsd-2021-21698 2026-10-03T16:47:55.470441+00:00 gsd-2021-21698 https://cve.radiocsirt.org/vuln/rhsa-2021:4799 RHSA-2021:4799 — Red Hat Security Advisory: OpenShift Container Platform 4.6.51 packages and security update 2026-10-03T16:47:55.470453+00:00

jenkins: FilePath#mkdirs does not check permission to create parent directories jenkins: File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories jenkins: FilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link jenkins: FilePath#reading(FileVisitor) does not reject any operations allowing users to have unrestricted read access jenkins: FilePath#unzip and FilePath#untar were not subject to any access control jenkins: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path jenkins: Creating symbolic links is possible without the symlink permission jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path jenkins: When creating temporary files, permission to create files is only checked after they’ve been created. jenkins: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links. jenkins: Agent-to-controller access control allowed writing to sensitive directory used by Pipeline: Shared Groovy Libraries Plugin jenkins: Agent-to-controller access control allows reading/writing most content of build directories jenkins-2-plugins/subversion: does not restrict the na…