https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:30:57.203773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199871 EUVD-2026-199871 2026-10-05T16:30:57.273390+00:00 EUVD-2026-199871 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37945 fkie_cve-2023-37945 2026-10-05T16:30:57.273434+00:00

A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.

 https://cve.radiocsirt.org/vuln/ghsa-p4wr-9wfm-f9jw GHSA-p4wr-9wfm-f9jw — Jenkins SAML Single Sign On(SSO) Plugin missing permission check 2026-10-05T16:30:57.273504+00:00

Affected: Maven: io.jenkins.plugins:miniorange-saml-sp

Jenkins SAML Single Sign On(SSO) Plugin 2.3.0 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to download a string representation of the current security realm (Java `Object#toString()`), which potentially includes sensitive information.

SAML Single Sign On(SSO) Plugin 2.3.1 requires Overall/Administer permission to access the affected HTTP endpoint, and only allows downloading a string representation if the current security realm is this plugin’s.

 https://cve.radiocsirt.org/vuln/gsd-2023-37945 gsd-2023-37945 2026-10-05T16:30:57.273555+00:00 gsd-2023-37945 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1743 WID-SEC-W-2023-1743 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T16:30:57.273569+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.