https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:36:14.352099+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-17220 cnvd-2017-17220 2026-10-07T14:36:14.428523+00:00 cnvd-2017-17220 https://cve.radiocsirt.org/vuln/euvd-2026-80795 EUVD-2026-80795 2026-10-07T14:36:14.428563+00:00 EUVD-2026-80795 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000085 fkie_cve-2017-1000085 2026-10-07T14:36:14.428578+00:00

Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to connect to any web server or Subversion server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery attacks.

 https://cve.radiocsirt.org/vuln/ghsa-hrwc-pqfm-g6qf GHSA-hrwc-pqfm-g6qf — Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability 2026-10-07T14:36:14.428613+00:00

Affected: Maven: org.jenkins-ci.plugins:subversion

Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to connect to any web server or Subversion server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery attacks. As of version 2.9, this functionality properly checks permissions and is only available via POST.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000085 gsd-2017-1000085 2026-10-07T14:36:14.428640+00:00 gsd-2017-1000085 https://cve.radiocsirt.org/vuln/rhba-2017:2642 RHBA-2017:2642 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.6.1 bug fix and enhancement update 2026-10-07T14:36:14.428652+00:00

jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303) jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433) jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528) jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)