https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:28:59.461359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02900 bdu:2024-02900 2026-10-04T11:28:59.540146+00:00 bdu:2024-02900 https://cve.radiocsirt.org/vuln/bit-jenkins-2023-43495 BIT-jenkins-2023-43495 2026-10-04T11:28:59.540184+00:00

Affected: Bitnami: jenkins

Jenkins LTS 2.414.1 and earlier does not escape the value of the 'caption' constructor parameter of 'ExpandableDetailsNote', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control this parameter.

 https://cve.radiocsirt.org/vuln/euvd-2026-187649 EUVD-2026-187649 2026-10-04T11:28:59.540218+00:00 EUVD-2026-187649 https://cve.radiocsirt.org/vuln/fkie_cve-2023-43495 fkie_cve-2023-43495 2026-10-04T11:28:59.540232+00:00

Jenkins 2.423 and earlier, LTS 2.414.1 and earlier does not escape the value of the 'caption' constructor parameter of 'ExpandableDetailsNote', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control this parameter.

 https://cve.radiocsirt.org/vuln/ghsa-5j46-5hwq-gwh7 GHSA-5j46-5hwq-gwh7 — Jenkins Cross-site Scripting vulnerability 2026-10-04T11:28:59.540255+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

`ExpandableDetailsNote` allows annotating build log content with additional information that can be revealed when interacted with.

Jenkins 2.423 and earlier, LTS 2.414.1 and earlier does not escape the value of the `caption` constructor parameter of `ExpandableDetailsNote`.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide `caption` parameter values.

As of publication, the related API is not used within Jenkins (core), and the Jenkins security team is not aware of any affected plugins. Jenkins 2.424, LTS 2.414.2 escapes `caption` constructor parameter values.

 https://cve.radiocsirt.org/vuln/gsd-2023-43495 gsd-2023-43495 2026-10-04T11:28:59.540282+00:00 gsd-2023-43495 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2411 WID-SEC-W-2023-2411 — Jenkins: Mehrere Schwachstellen 2026-10-04T11:28:59.540294+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, XSS-Angriffe durchzuführen, Dateien zu manipulieren oder Cross-Site Request Forgery-Angriffe durchzuführen.