https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:18:02.679441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-57303 CVE-2026-57303 2026-10-08T11:18:02.695265+00:00

Affected: Jenkins Project Jenkins Assembla Plugin

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.