https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T15:52:29.352634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-29436 cnvd-2021-29436 2026-10-23T15:52:29.415247+00:00 cnvd-2021-29436 https://cve.radiocsirt.org/vuln/euvd-2026-23007 EUVD-2026-23007 2026-10-23T15:52:29.415287+00:00 EUVD-2026-23007 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22512 fkie_cve-2021-22512 2026-10-23T15:52:29.415303+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks.

 https://cve.radiocsirt.org/vuln/ghsa-mwg2-3xpv-5v28 GHSA-mwg2-3xpv-5v28 — CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin 2026-10-23T15:52:29.415332+00:00

Affected: Maven: org.jenkins-ci.plugins:hp-application-automation-tools-plugin

Micro Focus Application Automation Tools Plugin 6.7 and earlier does not perform permission checks in methods implementing form validation.

This allows attackers with Overall/Read permission to connect to attacker-specified URLs using attacker-specified username and password.

Additionally, these form validation methods do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Micro Focus Application Automation Tools Plugin 6.8 requires POST requests and Overall/Administer permission for the affected form validation methods.

 https://cve.radiocsirt.org/vuln/gsd-2021-22512 gsd-2021-22512 2026-10-23T15:52:29.415373+00:00 gsd-2021-22512