https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:52:24.119816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211642 EUVD-2026-211642 2026-10-03T08:52:24.127740+00:00 EUVD-2026-211642 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32993 fkie_cve-2023-32993 2026-10-03T08:52:24.127771+00:00

Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.

 https://cve.radiocsirt.org/vuln/ghsa-6v6h-rw43-97fh GHSA-6v6h-rw43-97fh — Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation 2026-10-03T08:52:24.127802+00:00

Affected: Maven: io.jenkins.plugins:miniorange-saml-sp

Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata.

This lack of validation could be abused using a man-in-the-middle attack to intercept these connections.

SAML Single Sign On(SSO) Plugin 2.1.0 performs hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata.

 https://cve.radiocsirt.org/vuln/gsd-2023-32993 gsd-2023-32993 2026-10-03T08:52:24.127829+00:00 gsd-2023-32993 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1228 WID-SEC-W-2023-1228 — Jenkins Plugins: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-03T08:52:24.127841+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site-Scripting-Angriff-durchzuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Request-Forgery-Angriff durchzuführen.