https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:31:55 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-29445 cnvd-2017-29445 https://cve.radiocsirt.org/vuln/cnvd-2017-29445 https://cve.radiocsirt.org/vuln/euvd-2026-80777 EUVD-2026-80777 https://cve.radiocsirt.org/vuln/euvd-2026-80777 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000092 <p>Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server.</p> <p>Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000092 https://cve.radiocsirt.org/vuln/ghsa-rf5q-8gx3-xqfc <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:git</p> <p>Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:git</p> <p>Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenkins URL which would result in the Jenkins Git client sending the username and password to an attacker-controlled server.</p> https://cve.radiocsirt.org/vuln/ghsa-rf5q-8gx3-xqfc https://cve.radiocsirt.org/vuln/gsd-2017-1000092 gsd-2017-1000092 https://cve.radiocsirt.org/vuln/gsd-2017-1000092 https://cve.radiocsirt.org/vuln/rhba-2017:2642 <p>jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303) jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433) jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528) jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)</p> <p>jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303) jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433) jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528) jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)</p> https://cve.radiocsirt.org/vuln/rhba-2017:2642