https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:55:07.427980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03514 bdu:2023-03514 2026-10-03T00:55:07.504944+00:00 bdu:2023-03514 https://cve.radiocsirt.org/vuln/euvd-2026-211553 EUVD-2026-211553 2026-10-03T00:55:07.504981+00:00 EUVD-2026-211553 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32987 fkie_cve-2023-32987 2026-10-03T00:55:07.504996+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.

 https://cve.radiocsirt.org/vuln/ghsa-pmmr-r9v2-59p8 GHSA-pmmr-r9v2-59p8 — Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability 2026-10-03T00:55:07.505027+00:00

Affected: Maven: org.jenkins-ci.plugins:reverse-proxy-auth-plugin

Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier does not require POST requests for a form validation method, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.

Reverse Proxy Auth Plugin 1.7.5 requires POST requests for the affected form validation method.

 https://cve.radiocsirt.org/vuln/gsd-2023-32987 gsd-2023-32987 2026-10-03T00:55:07.505055+00:00 gsd-2023-32987 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1228 WID-SEC-W-2023-1228 — Jenkins Plugins: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T00:55:07.505067+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site-Scripting-Angriff-durchzuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Request-Forgery-Angriff durchzuführen.