https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:51:18.592076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-79938 cnvd-2022-79938 2026-10-02T20:51:18.666379+00:00 cnvd-2022-79938 https://cve.radiocsirt.org/vuln/euvd-2026-16003 EUVD-2026-16003 2026-10-02T20:51:18.666426+00:00 EUVD-2026-16003 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29049 fkie_cve-2022-29049 2026-10-02T20:51:18.666442+00:00

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.

 https://cve.radiocsirt.org/vuln/ghsa-jmxr-w2jc-qp7w GHSA-jmxr-w2jc-qp7w — Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL 2026-10-02T20:51:18.666472+00:00

Affected: Maven: org.jenkins-ci.plugins:promoted-builds

Jenkins promoted builds Plugin provides dedicated support for defining promotions using [Job DSL Plugin](https://plugins.jenkins.io/job-dsl).

promoted builds Plugin 873.v6149db_d64130 and earlier does not validate the names of promotions defined in Job DSL. This allows attackers with Job/Configure permission to create a promotion with an unsafe name. As a result, the promotion name could be used for cross-site scripting (XSS) or to replace other `config.xml` files.

promoted builds Plugin 876.v99d29788b_36b_ and 3.10.1 validates the name of promotions.

 https://cve.radiocsirt.org/vuln/gsd-2022-29049 gsd-2022-29049 2026-10-02T20:51:18.666503+00:00 gsd-2022-29049 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0265 WID-SEC-W-2022-0265 — Jenkins: Mehrere Schwachstellen 2026-10-02T20:51:18.666515+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und Dateien zu manipulieren.