https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:10:37.841860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-29445 cnvd-2017-29445 2026-10-07T23:10:37.921259+00:00 cnvd-2017-29445 https://cve.radiocsirt.org/vuln/euvd-2026-80777 EUVD-2026-80777 2026-10-07T23:10:37.921304+00:00 EUVD-2026-80777 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000092 fkie_cve-2017-1000092 2026-10-07T23:10:37.921319+00:00

Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server.

 https://cve.radiocsirt.org/vuln/ghsa-rf5q-8gx3-xqfc GHSA-rf5q-8gx3-xqfc — Cross-Site Request Forgery in Jenkins Git Plugin 2026-10-07T23:10:37.921353+00:00

Affected: Maven: org.jenkins-ci.plugins:git

Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000092 gsd-2017-1000092 2026-10-07T23:10:37.921378+00:00 gsd-2017-1000092 https://cve.radiocsirt.org/vuln/rhba-2017:2642 RHBA-2017:2642 — Red Hat Bug Fix Advisory: OpenShift Container Platform 3.6.1 bug fix and enhancement update 2026-10-07T23:10:37.921391+00:00

jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303) jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433) jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528) jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)