https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:53:57.796816+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201544 EUVD-2026-201544 2026-10-05T16:53:57.801522+00:00 EUVD-2026-201544 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52552 fkie_cve-2024-52552 2026-10-05T16:53:57.801568+00:00

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

 https://cve.radiocsirt.org/vuln/ghsa-8886-8v27-85j8 GHSA-8886-8v27-85j8 — Stored XSS vulnerability in Jenkins Authorize Project Plugin 2026-10-05T16:53:57.801612+00:00

Affected: Maven: org.jenkins-ci.plugins:authorize-project

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Authorize Project Plugin 1.8.0 no longer evaluates a string containing the job name with JavaScript on the Authorization view.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456 WID-SEC-W-2024-3456 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-05T16:53:57.801678+00:00

Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.