https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T11:26:46.288809+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-28635 cnvd-2017-28635 2026-10-23T11:26:46.350743+00:00 cnvd-2017-28635 https://cve.radiocsirt.org/vuln/euvd-2026-182855 EUVD-2026-182855 2026-10-23T11:26:46.350781+00:00 EUVD-2026-182855 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000104 fkie_cve-2017-1000104 2026-10-23T11:26:46.350795+00:00

The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs directly that allowed viewing these files. Access to view these files now requires sufficient permissions to configure the provided files, view the configuration of the folder in which the configuration files are defined, or have Job/Configure permissions to a job able to use these files.

 https://cve.radiocsirt.org/vuln/ghsa-6h72-m3xw-fp3c GHSA-6h72-m3xw-fp3c — Improper Privilege Management in Jenkins Config File Provider Plugin 2026-10-23T11:26:46.350829+00:00

Affected: Maven: org.jenkins-ci.plugins:config-file-provider

The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall/Read access to Jenkins were able to access URLs directly that allowed viewing these files. Access to view these files now requires sufficient permissions to configure the provided files, view the configuration of the folder in which the configuration files are defined, or have Job/Configure permissions to a job able to use these files.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000104 gsd-2017-1000104 2026-10-23T11:26:46.350855+00:00 gsd-2017-1000104