https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T22:37:49.988607+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-54937 cnvd-2022-54937 2026-10-17T22:37:49.991684+00:00 cnvd-2022-54937 https://cve.radiocsirt.org/vuln/euvd-2026-15598 EUVD-2026-15598 2026-10-17T22:37:49.991730+00:00 EUVD-2026-15598 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28150 fkie_cve-2022-28150 2026-10-17T22:37:49.991753+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job.

 https://cve.radiocsirt.org/vuln/ghsa-85f9-w9cx-h363 GHSA-85f9-w9cx-h363 — Cross site request forgery in Jenkins Job and Node ownership Plugin 2026-10-17T22:37:49.991799+00:00

Affected: Maven: com.synopsys.jenkinsci:ownership

Job and Node ownership Plugin 0.13.0 and earlier does not perform a permission check in several HTTP endpoints. This allows attackers with Item/Read permission to change the owners and item-specific permissions of a job. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-28150 gsd-2022-28150 2026-10-17T22:37:49.991848+00:00 gsd-2022-28150