https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:53:47.857437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223607 EUVD-2026-223607 2026-10-03T09:53:47.960831+00:00 EUVD-2026-223607 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25761 fkie_cve-2023-25761 2026-10-03T09:53:47.960870+00:00

Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.

 https://cve.radiocsirt.org/vuln/ghsa-ph74-8rgx-64c5 GHSA-ph74-8rgx-64c5 — Cross-site Scripting in Jenkins JUnit Plugin 2026-10-03T09:53:47.960903+00:00

Affected: Maven: org.jenkins-ci.plugins:junit

Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.

 https://cve.radiocsirt.org/vuln/gsd-2023-25761 gsd-2023-25761 2026-10-03T09:53:47.960927+00:00 gsd-2023-25761 https://cve.radiocsirt.org/vuln/msrc_cve-2023-25761 msrc_CVE-2023-25761 — Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, r… 2026-10-03T09:53:47.960940+00:00 msrc_CVE-2023-25761 https://cve.radiocsirt.org/vuln/rhsa-2023:1866 RHSA-2023:1866 — Red Hat Security Advisory: OpenShift Container Platform 4.10.58 security update 2026-10-03T09:53:47.960958+00:00

jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin

 https://cve.radiocsirt.org/vuln/tssa-2025-00001 tssa-2025-00001 — Project CSAF document 2026-10-03T09:53:47.960978+00:00

Detailed list of project vulnerabilities

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0397 WID-SEC-W-2023-0397 — Jenkins: Mehrere Schwachstellen 2026-10-03T09:53:47.960993+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.