https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:18:59.875124+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01935 bdu:2023-01935 2026-10-09T02:18:59.878759+00:00 bdu:2023-01935 https://cve.radiocsirt.org/vuln/euvd-2026-219017 EUVD-2026-219017 2026-10-09T02:18:59.878792+00:00 EUVD-2026-219017 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28676 fkie_cve-2023-28676 2026-10-09T02:18:59.878806+00:00

A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freestyle project, potentially leading to remote code execution (RCE).

 https://cve.radiocsirt.org/vuln/ghsa-48g9-h7g5-8pw2 GHSA-48g9-h7g5-8pw2 — Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery 2026-10-09T02:18:59.878834+00:00

Affected: Maven: org.jenkins-ci.plugins:convert-to-pipeline

Convert To Pipeline Plugin 1.0 and earlier does not require POST requests for the HTTP endpoint converting a Freestyle project to Pipeline, resulting in a cross-site request forgery (CSRF) vulnerability.

This vulnerability allows attackers to create a Pipeline based on a Freestyle project. Combined with [SECURITY-2966](https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-2966)/CVE-2023-28677, this can result in the execution of unsandboxed Pipeline scripts.

 https://cve.radiocsirt.org/vuln/gsd-2023-28676 gsd-2023-28676 2026-10-09T02:18:59.878860+00:00 gsd-2023-28676 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704 WID-SEC-W-2023-0704 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-09T02:18:59.878872+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.