https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:46:54 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-62246 cnvd-2020-62246 https://cve.radiocsirt.org/vuln/cnvd-2020-62246 https://cve.radiocsirt.org/vuln/euvd-2026-35993 EUVD-2026-35993 https://cve.radiocsirt.org/vuln/euvd-2026-35993 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2304 <p>Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2304 https://cve.radiocsirt.org/vuln/ghsa-vp5f-8jgw-j53c <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:subversion</p> <p>Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers able to control an agent process to have Jenkins parse a crafted changelog file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.</p> <p>Jenkins Subversion Plugin 2.13.2 disables external entity resolution for its XML parser.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:subversion</p> <p>Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers able to control an agent process to have Jenkins parse a crafted changelog file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.</p> <p>Jenkins Subversion Plugin 2.13.2 disables external entity resolution for its XML parser.</p> https://cve.radiocsirt.org/vuln/ghsa-vp5f-8jgw-j53c https://cve.radiocsirt.org/vuln/gsd-2020-2304 gsd-2020-2304 https://cve.radiocsirt.org/vuln/gsd-2020-2304 https://cve.radiocsirt.org/vuln/rhsa-2021:0034 <p>jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs python-urllib3: CRLF injection via HTTP request method</p> <p>jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs python-urllib3: CRLF injection via HTTP request method</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0034