https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T13:58:11.193009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-54927 cnvd-2022-54927 2026-10-16T13:58:11.196023+00:00 cnvd-2022-54927 https://cve.radiocsirt.org/vuln/euvd-2026-15667 EUVD-2026-15667 2026-10-16T13:58:11.196054+00:00 EUVD-2026-15667 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28138 fkie_cve-2022-28138 2026-10-16T13:58:11.196068+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.

 https://cve.radiocsirt.org/vuln/ghsa-x25h-f84x-wh4m GHSA-x25h-f84x-wh4m — CSRF vulnerability in Jenkins RocketChat Notifier Plugin 2026-10-16T13:58:11.196095+00:00

Affected: Maven: org.jenkins-ci.plugins:rocketchatnotifier

Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential.

Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

RocketChat Notifier Plugin 1.5.0 requires POST requests and Overall/Administer permission for the affected form validation method.

 https://cve.radiocsirt.org/vuln/gsd-2022-28138 gsd-2022-28138 2026-10-16T13:58:11.196121+00:00 gsd-2022-28138