https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:22:21.414141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-219068 EUVD-2026-219068 2026-10-08T22:22:21.418014+00:00 EUVD-2026-219068 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28670 fkie_cve-2023-28670 2026-10-08T22:22:21.418054+00:00

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.

 https://cve.radiocsirt.org/vuln/ghsa-v27q-87jf-j9cr GHSA-v27q-87jf-j9cr — Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting 2026-10-08T22:22:21.418130+00:00

Affected: Maven: com.paul8620.jenkins.plugins:pipeline-aggregator-view

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission. Version 1.14 obtains the current URL in a way not susceptible to XSS.

 https://cve.radiocsirt.org/vuln/gsd-2023-28670 gsd-2023-28670 2026-10-08T22:22:21.418159+00:00 gsd-2023-28670 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704 WID-SEC-W-2023-0704 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-08T22:22:21.418171+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.