https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:27:08.657249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-197077 EUVD-2026-197077 2026-10-02T16:27:08.660327+00:00 EUVD-2026-197077 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39153 fkie_cve-2023-39153 2026-10-02T16:27:08.660359+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.

 https://cve.radiocsirt.org/vuln/ghsa-cg6r-gqvc-r396 GHSA-cg6r-gqvc-r396 — CSRF vulnerability in GitLab Authentication Plugin 2026-10-02T16:27:08.660391+00:00

Affected: Maven: org.jenkins-ci.plugins:gitlab-oauth

GitLab Authentication Plugin 1.17.1 and earlier does not implement a state parameter in its OAuth flow, a unique and non-guessable value associated with each authentication request.

This vulnerability allows attackers to trick users into logging in to the attacker’s account.

GitLab Authentication Plugin 1.18 implements a state parameter in its OAuth flow.

 https://cve.radiocsirt.org/vuln/gsd-2023-39153 gsd-2023-39153 2026-10-02T16:27:08.660421+00:00 gsd-2023-39153 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1902 WID-SEC-W-2023-1902 — Jenkins: Mehrere Schwachstellen 2026-10-02T16:27:08.660434+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.