Most recent entries from all

bdu:2022-04868

2026-10-03T05:43:19.780912+00:00

bdu:2022-04868

EUVD-2026-18654

2026-10-03T05:43:19.780947+00:00

EUVD-2026-18654

fkie_cve-2022-36892

2026-10-03T05:43:19.780962+00:00

Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.

GHSA-w8gx-4r6w-3rx9 — Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation

2026-10-03T05:43:19.780993+00:00

Affected: Maven: org.jenkins-ci.plugins:rhnpush-plugin

Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A sequence of requests can be used to effectively list workspace contents.

rhnpush-plugin Plugin 0.5.2 requires Item/Workspace permission to validate patterns with workspace contents.

gsd-2022-36892

2026-10-03T05:43:19.781021+00:00

gsd-2022-36892

WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen

2026-10-03T05:43:19.781033+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren