https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T12:00:12.425082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-46300 cnvd-2020-46300 2026-10-16T12:00:12.428025+00:00 cnvd-2020-46300 https://cve.radiocsirt.org/vuln/euvd-2026-35877 EUVD-2026-35877 2026-10-16T12:00:12.428060+00:00 EUVD-2026-35877 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2235 fkie_cve-2020-2235 2026-10-16T12:00:12.428074+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-c2hg-2jj6-h8vh GHSA-c2hg-2jj6-h8vh — CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials 2026-10-16T12:00:12.428102+00:00

Affected: Maven: org.jenkins-ci.plugins:pipeline-maven

Pipeline Maven Integration Plugin 3.8.2 and earlier does not perform a permission check in a method implementing form validation.

This allows users with Overall/Read access to Jenkins to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.

Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

Pipeline Maven Integration Plugin 3.8.3 requires POST requests and Job/Configure permission for the affected form validation method.

 https://cve.radiocsirt.org/vuln/gsd-2020-2235 gsd-2020-2235 2026-10-16T12:00:12.428130+00:00 gsd-2020-2235