https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:38:09 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2020-2231 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via &#39;Trigger builds remotely&#39;, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via &#39;Trigger builds remotely&#39;, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2020-2231 https://cve.radiocsirt.org/vuln/euvd-2026-35923 EUVD-2026-35923 https://cve.radiocsirt.org/vuln/euvd-2026-35923 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2231 <p>Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via &#39;Trigger builds remotely&#39;, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.</p> <p>Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via &#39;Trigger builds remotely&#39;, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2231 https://cve.radiocsirt.org/vuln/ghsa-jpvq-v729-7j2h <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via &#39;Trigger builds remotely&#39;, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via &#39;Trigger builds remotely&#39;, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.</p> https://cve.radiocsirt.org/vuln/ghsa-jpvq-v729-7j2h https://cve.radiocsirt.org/vuln/gsd-2020-2231 gsd-2020-2231 https://cve.radiocsirt.org/vuln/gsd-2020-2231 https://cve.radiocsirt.org/vuln/rhsa-2020:3808 <p>jetty: double release of resource can lead to information disclosure jenkins: Stored XSS vulnerability in job build time trend jenkins: Stored XSS vulnerability in upstream cause jenkins: Stored XSS vulnerability in &#39;keep forever&#39; badge icons jenkins: Stored XSS vulnerability in console links jenkins: user-specified tooltip values leads to stored cross-site scripting jenkins: stored XSS vulnerability in project naming strategy jenkins: stored XSS vulnerability in &#39;trigger builds remotely&#39; kubernetes: Node disk DOS by writing to container /etc/hosts</p> <p>jetty: double release of resource can lead to information disclosure jenkins: Stored XSS vulnerability in job build time trend jenkins: Stored XSS vulnerability in upstream cause jenkins: Stored XSS vulnerability in &#39;keep forever&#39; badge icons jenkins: Stored XSS vulnerability in console links jenkins: user-specified tooltip values leads to stored cross-site scripting jenkins: stored XSS vulnerability in project naming strategy jenkins: stored XSS vulnerability in &#39;trigger builds remotely&#39; kubernetes: Node disk DOS by writing to container /etc/hosts</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3808