https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:07:45.016355+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214246 EUVD-2026-214246 2026-10-12T23:07:45.086214+00:00 EUVD-2026-214246 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30523 fkie_cve-2023-30523 2026-10-12T23:07:45.086247+00:00

Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-qgw9-vgrf-h723 GHSA-qgw9-vgrf-h723 — Jenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller 2026-10-12T23:07:45.086279+00:00

Affected: Maven: org.jenkins-ci.plugins:reportportal

Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.

These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Additionally, the configuration form does not mask these tokens, increasing the potential for attackers to observe and capture them.

 https://cve.radiocsirt.org/vuln/gsd-2023-30523 gsd-2023-30523 2026-10-12T23:07:45.086306+00:00 gsd-2023-30523 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0952 WID-SEC-W-2023-0952 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-12T23:07:45.086319+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.