https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:41:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-43165 cnvd-2020-43165 https://cve.radiocsirt.org/vuln/cnvd-2020-43165 https://cve.radiocsirt.org/vuln/euvd-2026-35904 EUVD-2026-35904 https://cve.radiocsirt.org/vuln/euvd-2026-35904 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2226 <p>Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.</p> <p>Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2226 https://cve.radiocsirt.org/vuln/ghsa-vr6v-wjfw-rxcr <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:matrix-auth</p> <p>Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the permission table. This results in a stored cross-site scripting (XSS) vulnerability. When using project-based matrix authorization, this vulnerability can be exploited by a user with Job/Configure or Agent/Configure permission, otherwise by users with Overall/Administer permission.</p> <p>Matrix Authorization Strategy Plugin 2.6.2 escapes user names in the permission table.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:matrix-auth</p> <p>Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the permission table. This results in a stored cross-site scripting (XSS) vulnerability. When using project-based matrix authorization, this vulnerability can be exploited by a user with Job/Configure or Agent/Configure permission, otherwise by users with Overall/Administer permission.</p> <p>Matrix Authorization Strategy Plugin 2.6.2 escapes user names in the permission table.</p> https://cve.radiocsirt.org/vuln/ghsa-vr6v-wjfw-rxcr https://cve.radiocsirt.org/vuln/gsd-2020-2226 gsd-2020-2226 https://cve.radiocsirt.org/vuln/gsd-2020-2226 https://cve.radiocsirt.org/vuln/rhsa-2020:3453 <p>jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps jenkins-credentials-binding-plugin: improper masking of secrets jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin python-rsa: decryption of ciphertext leads to DoS</p> <p>jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps jenkins-credentials-binding-plugin: improper masking of secrets jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin python-rsa: decryption of ciphertext leads to DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3453