https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T12:15:37.204937+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-15199 cnvd-2022-15199 2026-10-28T12:15:37.208599+00:00 cnvd-2022-15199 https://cve.radiocsirt.org/vuln/euvd-2026-14440 EUVD-2026-14440 2026-10-28T12:15:37.208643+00:00 EUVD-2026-14440 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25212 fkie_cve-2022-25212 2026-10-28T12:15:37.208659+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.

 https://cve.radiocsirt.org/vuln/ghsa-2pj6-5hqc-w5x9 GHSA-2pj6-5hqc-w5x9 — CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials 2026-10-28T12:15:37.208686+00:00

Affected: Maven: org.continuousassurance.swamp.jenkins:swamp

WAMP Plugin 1.2.6 and earlier does not perform a permission check in a method implementing form validation.\

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-25212 gsd-2022-25212 2026-10-28T12:15:37.208749+00:00 gsd-2022-25212