https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:10:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02524 bdu:2019-02524 https://cve.radiocsirt.org/vuln/bdu:2019-02524 https://cve.radiocsirt.org/vuln/cnvd-2019-22647 cnvd-2019-22647 https://cve.radiocsirt.org/vuln/cnvd-2019-22647 https://cve.radiocsirt.org/vuln/euvd-2026-53552 EUVD-2026-53552 https://cve.radiocsirt.org/vuln/euvd-2026-53552 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10337 <p>An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the &#34;XML&#34; macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.</p> <p>An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the &#34;XML&#34; macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10337 https://cve.radiocsirt.org/vuln/ghsa-g6h2-4x64-c59x <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:token-macro</p> <p>An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the &#34;XML&#34; macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:token-macro</p> <p>An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the &#34;XML&#34; macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-g6h2-4x64-c59x https://cve.radiocsirt.org/vuln/gsd-2019-10337 gsd-2019-10337 https://cve.radiocsirt.org/vuln/gsd-2019-10337 https://cve.radiocsirt.org/vuln/rhsa-2019:1636 <p>jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro</p> <p>jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (SECURITY-1322) jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921) jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1636