https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T10:38:43.542805+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-55183 cnvd-2020-55183 2026-10-21T10:38:43.545879+00:00 cnvd-2020-55183 https://cve.radiocsirt.org/vuln/euvd-2026-35981 EUVD-2026-35981 2026-10-21T10:38:43.545912+00:00 EUVD-2026-35981 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2280 fkie_cve-2020-2280 2026-10-21T10:38:43.545926+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-q564-vvx8-9388 GHSA-q564-vvx8-9388 — CSRF vulnerability in Jenkins warnings Plugin allows remote code execution 2026-10-21T10:38:43.545954+00:00

Affected: Maven: org.jvnet.hudson.plugins:warnings

warnings Plugin 5.0.1 and earlier does not require POST requests for a form validation method intended for testing custom warnings parsers, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to execute arbitrary code.

warnings Plugin 5.0.2 requires POST requests for the affected form validation method.

This vulnerability was caused by an incomplete fix to [SECURITY-1295](https://www.jenkins.io/security/advisory/2019-01-28/).

 https://cve.radiocsirt.org/vuln/gsd-2020-2280 gsd-2020-2280 2026-10-21T10:38:43.545980+00:00 gsd-2020-2280