https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:15:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-53524 EUVD-2026-53524 https://cve.radiocsirt.org/vuln/euvd-2026-53524 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10304 <p>A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.</p> <p>A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10304 https://cve.radiocsirt.org/vuln/ghsa-grpp-gx5h-pvh8 <p><strong>Affected:</strong> Maven: com.xebialabs.deployit.ci:deployit-plugin</p> <p>A missing permission check in a form validation method in Jenkins XebiaLabs XL Deploy Plugin allows users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified credentials.</p> <p>Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.</p> <p><strong>Affected:</strong> Maven: com.xebialabs.deployit.ci:deployit-plugin</p> <p>A missing permission check in a form validation method in Jenkins XebiaLabs XL Deploy Plugin allows users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified credentials.</p> <p>Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-grpp-gx5h-pvh8 https://cve.radiocsirt.org/vuln/gsd-2019-10304 gsd-2019-10304 https://cve.radiocsirt.org/vuln/gsd-2019-10304