https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:08:14.352365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214245 EUVD-2026-214245 2026-10-12T23:08:14.355966+00:00 EUVD-2026-214245 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30524 fkie_cve-2023-30524 2026-10-12T23:08:14.356013+00:00

Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.

 https://cve.radiocsirt.org/vuln/ghsa-j55j-28wc-v338 GHSA-j55j-28wc-v338 — Jenkins Report Portal Plugin configuration form does not mask tokens 2026-10-12T23:08:14.356061+00:00

Affected: Maven: org.jenkins-ci.plugins:reportportal

Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.

These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Additionally, the configuration form does not mask these tokens, increasing the potential for attackers to observe and capture them.

 https://cve.radiocsirt.org/vuln/gsd-2023-30524 gsd-2023-30524 2026-10-12T23:08:14.356114+00:00 gsd-2023-30524 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0952 WID-SEC-W-2023-0952 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-12T23:08:14.356136+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.