https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:47:29.931134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238503 EUVD-2026-238503 2026-10-03T12:47:29.935152+00:00 EUVD-2026-238503 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43420 fkie_cve-2022-43420 2026-10-03T12:47:29.935182+00:00

Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses.

 https://cve.radiocsirt.org/vuln/ghsa-hvcr-927w-qcvq GHSA-hvcr-927w-qcvq — Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin 2026-10-03T12:47:29.935223+00:00

Affected: Maven: org.jenkins-ci.plugins:contrast-continuous-application-security

Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the Contrast service when generating a report.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control or modify Contrast service API responses.

Contrast Continuous Application Security Plugin 3.10 escapes the affected data.

 https://cve.radiocsirt.org/vuln/gsd-2022-43420 gsd-2022-43420 2026-10-03T12:47:29.935253+00:00 gsd-2022-43420 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1804 WID-SEC-W-2022-1804 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T12:47:29.935266+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.