https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:41:22.097440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-208731 EUVD-2026-208731 2026-10-04T06:41:22.100692+00:00 EUVD-2026-208731 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35143 fkie_cve-2023-35143 2026-10-04T06:41:22.100724+00:00

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.

 https://cve.radiocsirt.org/vuln/ghsa-9pvw-8q92-hm9w GHSA-9pvw-8q92-hm9w — Stored XSS vulnerability in Jenkins Maven Repository Server Plugin 2026-10-04T06:41:22.100755+00:00

Affected: Maven: jenkins:repository

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.

 https://cve.radiocsirt.org/vuln/gsd-2023-35143 gsd-2023-35143 2026-10-04T06:41:22.100780+00:00 gsd-2023-35143 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1471 WID-SEC-W-2023-1471 — Jenkins Core und Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T06:41:22.100793+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.