https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:12:30.754498+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04872 bdu:2022-04872 2026-10-03T09:12:30.833802+00:00 bdu:2022-04872 https://cve.radiocsirt.org/vuln/euvd-2026-18668 EUVD-2026-18668 2026-10-03T09:12:30.833853+00:00 EUVD-2026-18668 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36905 fkie_cve-2022-36905 2026-10-03T09:12:30.833875+00:00

Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact versions parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-8294-mv9c-7m5h GHSA-8294-mv9c-7m5h — Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin 2026-10-03T09:12:30.833926+00:00

Affected: Maven: eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin

Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact versions parameters. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/gsd-2022-36905 gsd-2022-36905 2026-10-03T09:12:30.833967+00:00 gsd-2022-36905 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0852 WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen 2026-10-03T09:12:30.833986+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren