https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:31:32.273192+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-01934 bdu:2023-01934 2026-10-09T06:31:32.364287+00:00 bdu:2023-01934 https://cve.radiocsirt.org/vuln/euvd-2026-219016 EUVD-2026-219016 2026-10-09T06:31:32.364323+00:00 EUVD-2026-219016 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28677 fkie_cve-2023-28677 2026-10-09T06:31:32.364337+00:00

Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations, allowing attackers able to configure Freestyle projects to prepare a crafted configuration that injects Pipeline script code into the (unsandboxed) Pipeline resulting from a convertion by Jenkins Convert To Pipeline Plugin.

 https://cve.radiocsirt.org/vuln/ghsa-7c44-m589-36w7 GHSA-7c44-m589-36w7 — Jenkins Convert To Pipeline Plugin vulnerable to command injection 2026-10-09T06:31:32.364367+00:00

Affected: Maven: org.jenkins-ci.plugins:convert-to-pipeline

Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step invocations.

This allows attackers able to configure Freestyle projects to prepare a crafted configuration that injects Pipeline script code into the (unsandboxed) Pipeline resulting from a conversion by Convert To Pipeline Plugin. If an administrator converts the Freestyle project to a Pipeline, the script will be pre-approved.

 https://cve.radiocsirt.org/vuln/gsd-2023-28677 gsd-2023-28677 2026-10-09T06:31:32.364394+00:00 gsd-2023-28677 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704 WID-SEC-W-2023-0704 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-09T06:31:32.364406+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.