https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:29:11.497011+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jenkins-2023-39151 BIT-jenkins-2023-39151 2026-10-02T19:29:11.500579+00:00

Affected: Bitnami: jenkins

Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyperlinks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents.

 https://cve.radiocsirt.org/vuln/euvd-2026-196673 EUVD-2026-196673 2026-10-02T19:29:11.500631+00:00 EUVD-2026-196673 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39151 fkie_cve-2023-39151 2026-10-02T19:29:11.500648+00:00

Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyperlinks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents.

 https://cve.radiocsirt.org/vuln/ghsa-69vw-3pcm-84rw GHSA-69vw-3pcm-84rw — Jenkins Stored Cross-site Scripting vulnerability 2026-10-02T19:29:11.500672+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins applies formatting to the console output of builds, transforming plain URLs into hyperlinks. Jenkins 2.415 and earlier, 2.414 and earlier, and LTS 2.401.2 and earlier does not sanitize or properly encode URLs of these hyperlinks in build logs. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents. Jenkins 2.416, 2.414.1, and LTS 2.401.3 encodes URLs of affected hyperlink annotations in build logs.

 https://cve.radiocsirt.org/vuln/gsd-2023-39151 gsd-2023-39151 2026-10-02T19:29:11.500698+00:00 gsd-2023-39151 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1902 WID-SEC-W-2023-1902 — Jenkins: Mehrere Schwachstellen 2026-10-02T19:29:11.500711+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.