Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:38:10 +0000 cnvd-2020-61626 https://cve.radiocsirt.org/vuln/cnvd-2020-61626 cnvd-2020-61626 https://cve.radiocsirt.org/vuln/cnvd-2020-61626 EUVD-2026-35992 https://cve.radiocsirt.org/vuln/euvd-2026-35992 EUVD-2026-35992 https://cve.radiocsirt.org/vuln/euvd-2026-35992 fkie_cve-2020-2303 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2303 <p>A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.</p> <p>A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2303 GHSA-2wf5-4mf7-vmh3 — CSRF vulnerability in Jenkins Active Directory Plugin https://cve.radiocsirt.org/vuln/ghsa-2wf5-4mf7-vmh3 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:active-directory</p> <p>Jenkins Active Directory Plugin 2.19 and earlier does not require POST requests for multiple HTTP endpoints implementing connection and authentication tests, resulting in cross-site request forgery (CSRF) vulnerabilities.</p> <p>This vulnerability allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.</p> <p>Active Directory Plugin 2.20 requires POST requests for the affected HTTP endpoints.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:active-directory</p> <p>Jenkins Active Directory Plugin 2.19 and earlier does not require POST requests for multiple HTTP endpoints implementing connection and authentication tests, resulting in cross-site request forgery (CSRF) vulnerabilities.</p> <p>This vulnerability allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.</p> <p>Active Directory Plugin 2.20 requires POST requests for the affected HTTP endpoints.</p> https://cve.radiocsirt.org/vuln/ghsa-2wf5-4mf7-vmh3 gsd-2020-2303 https://cve.radiocsirt.org/vuln/gsd-2020-2303 gsd-2020-2303 https://cve.radiocsirt.org/vuln/gsd-2020-2303