https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T10:18:12.648853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08270 bdu:2023-08270 2026-10-12T10:18:12.652777+00:00 bdu:2023-08270 https://cve.radiocsirt.org/vuln/euvd-2026-216960 EUVD-2026-216960 2026-10-12T10:18:12.652810+00:00 EUVD-2026-216960 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49653 fkie_cve-2023-49653 2026-10-12T10:18:12.652824+00:00

Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

 https://cve.radiocsirt.org/vuln/ghsa-qmhq-876f-cr65 GHSA-qmhq-876f-cr65 — Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials 2026-10-12T10:18:12.652851+00:00

Affected: Maven: org.jenkins-ci.plugins:jira

Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing the use of system-scoped credentials otherwise reserved for the global configuration.

This allows attackers with Item/Configure permission to access and capture credentials they are not entitled to.

Jira Plugin 3.12 defines the appropriate context for credentials lookup.

 https://cve.radiocsirt.org/vuln/gsd-2023-49653 gsd-2023-49653 2026-10-12T10:18:12.652877+00:00 gsd-2023-49653 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3030 WID-SEC-W-2023-3030 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-12T10:18:12.652890+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Informationen offenzulegen, seine Privilegien zu erweitern oder Dateien zu manipulieren.