https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:23:01.717051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-219012 EUVD-2026-219012 2026-10-08T19:23:01.727994+00:00 EUVD-2026-219012 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28680 fkie_cve-2023-28680 2026-10-08T19:23:01.728030+00:00

Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-vq5h-qgxm-2m39 GHSA-vq5h-qgxm-2m39 — Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks 2026-10-08T19:23:01.728060+00:00

Affected: Maven: org.jenkins-ci.plugins:crap4j

Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

This allows attackers able to control Crap Report file contents to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.

 https://cve.radiocsirt.org/vuln/gsd-2023-28680 gsd-2023-28680 2026-10-08T19:23:01.728086+00:00 gsd-2023-28680 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704 WID-SEC-W-2023-0704 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-08T19:23:01.728098+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.