https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:50:19.405308+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199790 EUVD-2026-199790 2026-10-04T20:50:19.408653+00:00 EUVD-2026-199790 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37957 fkie_cve-2023-37957 2026-10-04T20:50:19.408700+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attackers to connect to an attacker-specified URL, capturing a newly generated JCLI token.

 https://cve.radiocsirt.org/vuln/ghsa-hmw6-r547-42fr GHSA-hmw6-r547-42fr — Jenkins Pipeline restFul API Plugin vulnerable to Cross Site Request Forgery 2026-10-04T20:50:19.408751+00:00

Affected: Maven: io.jenkins.plugins:pipeline-restful-api

Jenkins Pipeline restFul API Plugin 0.11 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to have Jenkins connect to an attacker-specified URL, capturing a newly generated JCLI token that allows impersonating the victim.

 https://cve.radiocsirt.org/vuln/gsd-2023-37957 gsd-2023-37957 2026-10-04T20:50:19.408794+00:00 gsd-2023-37957 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1743 WID-SEC-W-2023-1743 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-04T20:50:19.408813+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.