https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T16:42:19.288216+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-33748 cnvd-2020-33748 2026-10-23T16:42:19.356865+00:00 cnvd-2020-33748 https://cve.radiocsirt.org/vuln/euvd-2026-35948 EUVD-2026-35948 2026-10-23T16:42:19.356908+00:00 EUVD-2026-35948 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2200 fkie_cve-2020-2200 2026-10-23T16:42:19.356922+00:00

Jenkins Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins master for a form validation endpoint, resulting in an OS command injection vulnerability exploitable by users able to store such a file on the Jenkins master.

 https://cve.radiocsirt.org/vuln/ghsa-h5mv-fv98-gqmq GHSA-h5mv-fv98-gqmq — OS command injection vulnerability in Jenkins Play Framework Plugin 2026-10-23T16:42:19.356953+00:00

Affected: Maven: org.jenkins-ci.plugins:play-autotest-plugin

A form validation endpoint in Play Framework Plugin executes the `play` command to validate a given input file.

Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins controller. This results in an OS command injection vulnerability exploitable by users able to store such a file on the Jenkins controller (e.g. through archiving artifacts).

 https://cve.radiocsirt.org/vuln/gsd-2020-2200 gsd-2020-2200 2026-10-23T16:42:19.356979+00:00 gsd-2020-2200