https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T00:40:24.852373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199867 EUVD-2026-199867 2026-10-04T00:40:24.955967+00:00 EUVD-2026-199867 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37947 fkie_cve-2023-37947 2026-10-04T00:40:24.956040+00:00

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

 https://cve.radiocsirt.org/vuln/ghsa-35gf-xjgf-96c5 GHSA-35gf-xjgf-96c5 — Jenkins OpenShift Login Plugin vulnerable to Open Redirect 2026-10-04T00:40:24.956075+00:00

Affected: Maven: org.openshift.jenkins:openshift-login

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful authentication.

OpenShift Login Plugin 1.1.0.230.v5d7030b_f5432 only redirects to relative (Jenkins) URLs.

 https://cve.radiocsirt.org/vuln/gsd-2023-37947 gsd-2023-37947 2026-10-04T00:40:24.956103+00:00 gsd-2023-37947 https://cve.radiocsirt.org/vuln/rhsa-2024:0777 RHSA-2024:0777 — Red Hat Security Advisory: jenkins and jenkins-2-plugins security update 2026-10-04T00:40:24.956116+00:00

snakeyaml: Denial of Service due to missing nested depth limitation for collections maven-shared-utils: Command injection via Commandline class apache-commons-text: variable interpolation RCE guava: insecure temporary directory creation jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin jackson-databind: denial of service via cylic dependencies Jenkins: Session fixation vulnerability in OpenShift Login Plugin Jenkins: Open redirect vulnerability in OpenShift Login Plugin golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) jenkins-plugins: cloudbees-folder: CSRF vulnerability in Folders Plugin may approve unsandboxed scripts jenkins-plugins: cloudbees-folder: CSRF vulnerability in Folders Plugin jenkins-plugins: cloudbees-folder: Information disclosure in Folders Plugin jenkins-plugins: config-file-provider: Improper masking of credentials in Config File Provider Plugin jenkins-plugins: blueocean: CSRF vulnerability in Blue Ocean Plugin allows capturing credentials HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1743 WID-SEC-W-2023-1743 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T00:40:24.956164+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.