https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:48:38.322490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-23898 CVE-2024-23898 2026-10-06T23:48:38.342152+00:00

Affected: Jenkins Project Jenkins

Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.