Most recent entries from all

bdu:2022-04874

2026-10-03T01:39:27.484280+00:00

bdu:2022-04874

EUVD-2026-18673

2026-10-03T01:39:27.484318+00:00

EUVD-2026-18673

fkie_cve-2022-36893

2026-10-03T01:39:27.484333+00:00

Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.

GHSA-pw4g-jcp5-63m9 — Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation

2026-10-03T01:39:27.484362+00:00

Affected: Maven: org.jenkins-ci.plugins:rpmsign-plugin

Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A sequence of requests can be used to effectively list workspace contents.

rpmsign-plugin Plugin 0.5.1 requires Item/Workspace permission to validate patterns with workspace contents.

gsd-2022-36893

2026-10-03T01:39:27.484389+00:00

gsd-2022-36893

WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen

2026-10-03T01:39:27.484401+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren