https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:27:20.970819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2022-20612 BIT-jenkins-2022-20612 2026-10-03T11:27:20.997350+00:00

Affected: Bitnami: jenkins

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

 https://cve.radiocsirt.org/vuln/cnvd-2022-08036 cnvd-2022-08036 2026-10-03T11:27:20.997408+00:00 cnvd-2022-08036 https://cve.radiocsirt.org/vuln/euvd-2026-13202 EUVD-2026-13202 2026-10-03T11:27:20.997426+00:00 EUVD-2026-13202 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20612 fkie_cve-2022-20612 2026-10-03T11:27:20.997438+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

 https://cve.radiocsirt.org/vuln/ghsa-p92q-7fhh-mq35 GHSA-p92q-7fhh-mq35 — Cross-Site Request Forgery in Jenkins 2026-10-03T11:27:20.997459+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.329 and earlier, LTS 2.319.1 and earlier does not require POST requests for the HTTP endpoint handling manual build requests when no security realm is set, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to trigger build of job without parameters.

Jenkins 2.330, LTS 2.319.2 requires POST requests for the affected HTTP endpoint.

 https://cve.radiocsirt.org/vuln/gsd-2022-20612 gsd-2022-20612 2026-10-03T11:27:20.997484+00:00 gsd-2022-20612 https://cve.radiocsirt.org/vuln/rhsa-2022:0055 RHSA-2022:0055 — Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update 2026-10-03T11:27:20.997495+00:00

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix coreos-installer: incorrect signature verification on gzip-compressed install images jenkins-2-plugins/git: stored XSS vulnerability jenkins: FilePath#mkdirs does not check permission to create parent directories jenkins: File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories jenkins: FilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link jenkins: FilePath#reading(FileVisitor) does not reject any operations allowing users to have unrestricted read access jenkins: FilePath#unzip and FilePath#untar were not subject to any access control jenkins: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path jenkins: Creating symbolic links is possible without the symlink permission jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path jenkins: When creating temporary files, permission to create files is only checked after they’ve been created. jenkins: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links. jenkins: Agent-to-controller access control allowed writing to sensitive directory use…