https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T08:02:19.143116+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-17959 EUVD-2026-17959 2026-10-27T08:02:19.145715+00:00 EUVD-2026-17959 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34779 fkie_cve-2022-34779 2026-10-27T08:02:19.145745+00:00

A missing permission check in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-7c8f-m389-4xjc GHSA-7c8f-m389-4xjc — Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs 2026-10-27T08:02:19.145773+00:00

Affected: Maven: com.xebialabs.ci:xlrelease-plugin

XebiaLabs XL Release Plugin 22.0.0 and earlier does not perform permission checks in several HTTP endpoints.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

An enumeration of credentials IDs in XebiaLabs XL Release Plugin 22.0.1 requires Overall/Administer permission.

 https://cve.radiocsirt.org/vuln/gsd-2022-34779 gsd-2022-34779 2026-10-27T08:02:19.145799+00:00 gsd-2022-34779