https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:32:46.311076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08390 bdu:2024-08390 2026-10-03T16:32:46.318706+00:00 bdu:2024-08390 https://cve.radiocsirt.org/vuln/bit-jenkins-2024-47803 BIT-jenkins-2024-47803 2026-10-03T16:32:46.318745+00:00

Affected: Bitnami: jenkins

Jenkins LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

 https://cve.radiocsirt.org/vuln/euvd-2026-223664 EUVD-2026-223664 2026-10-03T16:32:46.318778+00:00 EUVD-2026-223664 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47803 fkie_cve-2024-47803 2026-10-03T16:32:46.318791+00:00

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

 https://cve.radiocsirt.org/vuln/ghsa-pj95-ph4q-4qm4 GHSA-pj95-ph4q-4qm4 — Jenkins exposes multi-line secrets through error messages 2026-10-03T16:32:46.318812+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins

Jenkins provides the `secretTextarea` form field for multi-line secrets.

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

This can result in exposure of multi-line secrets through those error messages, e.g., in the system log.

Jenkins 2.479, LTS 2.462.3 redacts multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

 https://cve.radiocsirt.org/vuln/rhsa-2024:8884 RHSA-2024:8884 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update 2026-10-03T16:32:46.318839+00:00

angus-mail: Enabling Secure Server Identity Checks for Safer SMTPS Communication spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression jenkins: Exposure of multi-line secrets through error messages jenkins: Item creation restriction bypass vulnerability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3071 WID-SEC-W-2024-3071 — Jenkins: Mehrere Schwachstellen 2026-10-03T16:32:46.318860+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Jenkins und verschiedenen Jenkins Plugins ausnutzen, um Informationen offenzulegen Sicherheitsvorkehrungen zu umgehen oder seine Rechte zu erweitern.