https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:48:47.055914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193947 EUVD-2026-193947 2026-10-04T20:48:47.060450+00:00 EUVD-2026-193947 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40351 fkie_cve-2023-40351 2026-10-04T20:48:47.060501+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Favorite View Plugin 5.v77a_37f62782d and earlier allows attackers to add or remove views from another user's favorite views tab bar.

 https://cve.radiocsirt.org/vuln/ghsa-jrj6-qx48-3cpq GHSA-jrj6-qx48-3cpq — Jenkins Favorite View Plugin cross-site request forgery vulnerability 2026-10-04T20:48:47.060552+00:00

Affected: Maven: org.jenkins-ci.plugins:favorite-view

Jenkins Favorite View Plugin 5.v77a_37f62782d and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to add or remove views from another user’s favorite views tab bar.

As of publication of this advisory, there is no fix.

 https://cve.radiocsirt.org/vuln/gsd-2023-40351 gsd-2023-40351 2026-10-04T20:48:47.060608+00:00 gsd-2023-40351 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2088 WID-SEC-W-2023-2088 — Jenkins: Mehrere Schwachstellen 2026-10-04T20:48:47.060633+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.