https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T05:53:52.140558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-241536 EUVD-2026-241536 2026-10-22T05:53:52.143321+00:00 EUVD-2026-241536 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41231 fkie_cve-2022-41231 2026-10-22T05:53:52.143361+00:00

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-jrqh-c9v8-ccx9 GHSA-jrqh-c9v8-ccx9 — Path traversal in Jenkins build-publisher Plugin 2026-10-22T05:53:52.143394+00:00

Affected: Maven: org.jenkins-ci.plugins:build-publisher

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system by providing a crafted file name to an API endpoint. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability that allows attackers to replace any `config.xml` file on the Jenkins controller file system with an empty file.

There is currently no known workaround or fix, and this plugin has been suspended.

 https://cve.radiocsirt.org/vuln/gsd-2022-41231 gsd-2022-41231 2026-10-22T05:53:52.143423+00:00 gsd-2022-41231