https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:29:27.040767+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-49797 cnvd-2022-49797 2026-10-03T22:29:27.111293+00:00 cnvd-2022-49797 https://cve.radiocsirt.org/vuln/euvd-2026-17761 EUVD-2026-17761 2026-10-03T22:29:27.111332+00:00 EUVD-2026-17761 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34179 fkie_cve-2022-34179 2026-10-03T22:29:27.111347+00:00

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-93mx-2vf9-28c4 GHSA-93mx-2vf9-28c4 — Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin 2026-10-03T22:29:27.111380+00:00

Affected: Maven: org.jenkins-ci.plugins:embeddable-build-status

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system.

Embeddable Build Status Plugin 2.0.4 restricts the `style` query parameter to one of the three legal values.

 https://cve.radiocsirt.org/vuln/gsd-2022-34179 gsd-2022-34179 2026-10-03T22:29:27.111408+00:00 gsd-2022-34179 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 WID-SEC-W-2022-0445 — Jenkins: Mehrere Schwachstellen 2026-10-03T22:29:27.111420+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.