https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T04:15:33.262317+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-35781 EUVD-2026-35781 2026-10-23T04:15:33.264785+00:00 EUVD-2026-35781 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2093 fkie_cve-2020-2093 2026-10-23T04:15:33.264813+00:00

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.

 https://cve.radiocsirt.org/vuln/ghsa-fc92-8r77-9297 GHSA-fc92-8r77-9297 — CSRF vulnerability in Health Advisor by CloudBees Plugin 2026-10-23T04:15:33.264842+00:00

Affected: Maven: org.jenkins-ci.plugins:cloudbees-jenkins-advisor

Health Advisor by CloudBees Plugin 3.0 and earlier does not perform permission checks in methods performing form validation. This allows users with Overall/Read access to send an email with fixed content to an attacker-specified recipient.

Additionally, these form validation methods do not require POST requests, resulting in a CSRF vulnerability.

Health Advisor by CloudBees Plugin 3.0.1 requires POST requests and Overall/Administer permission for the affected form validation methods.

 https://cve.radiocsirt.org/vuln/gsd-2020-2093 gsd-2020-2093 2026-10-23T04:15:33.264869+00:00 gsd-2020-2093