Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 07:14:30 +0000 cnvd-2019-39898 https://cve.radiocsirt.org/vuln/cnvd-2019-39898 cnvd-2019-39898 https://cve.radiocsirt.org/vuln/cnvd-2019-39898 EUVD-2026-53748 https://cve.radiocsirt.org/vuln/euvd-2026-53748 EUVD-2026-53748 https://cve.radiocsirt.org/vuln/euvd-2026-53748 fkie_cve-2019-10456 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10456 <p>A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.</p> <p>A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10456 GHSA-h668-p5hg-7mc5 — Jenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerability https://cve.radiocsirt.org/vuln/ghsa-h668-p5hg-7mc5 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:oracle-cloud-infrastructure-compute-classic</p> <p>Jenkins Oracle Cloud Infrastructure Compute Classic Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to initiate a connection test to an attacker-specified server with attacker-specified username and password.</p> <p>Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.</p> <p>As of publication of this advisory there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:oracle-cloud-infrastructure-compute-classic</p> <p>Jenkins Oracle Cloud Infrastructure Compute Classic Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to initiate a connection test to an attacker-specified server with attacker-specified username and password.</p> <p>Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.</p> <p>As of publication of this advisory there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-h668-p5hg-7mc5 gsd-2019-10456 https://cve.radiocsirt.org/vuln/gsd-2019-10456 gsd-2019-10456 https://cve.radiocsirt.org/vuln/gsd-2019-10456