https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T07:45:33.354706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-09557 cnvd-2018-09557 2026-10-12T07:45:33.431947+00:00 cnvd-2018-09557 https://cve.radiocsirt.org/vuln/euvd-2026-71100 EUVD-2026-71100 2026-10-12T07:45:33.431984+00:00 EUVD-2026-71100 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000173 fkie_cve-2018-1000173 2026-10-12T07:45:33.431999+00:00

A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.

 https://cve.radiocsirt.org/vuln/ghsa-rp82-xvg3-727c GHSA-rp82-xvg3-727c — Jenkins Google Login Plugin Session Fixation vulnerability 2026-10-12T07:45:33.432027+00:00

Affected: Maven: org.jenkins-ci.plugins:google-login

A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session. Google Login Plugin 1.3.1 invalidates the previous session during login, and creates a new one.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000173 gsd-2018-1000173 2026-10-12T07:45:33.432053+00:00 gsd-2018-1000173