https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:12:49.575045+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-207895 EUVD-2026-207895 2026-10-04T06:12:49.579050+00:00 EUVD-2026-207895 https://cve.radiocsirt.org/vuln/fkie_cve-2023-35147 fkie_cve-2023-35147 2026-10-04T06:12:49.579090+00:00

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-whgj-6m78-2gg9 GHSA-whgj-6m78-2gg9 — Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin 2026-10-04T06:12:49.579124+00:00

Affected: Maven: org.jenkins-ci.plugins:aws-codecommit-trigger

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/gsd-2023-35147 gsd-2023-35147 2026-10-04T06:12:49.579148+00:00 gsd-2023-35147 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1471 WID-SEC-W-2023-1471 — Jenkins Core und Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T06:12:49.579159+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.