https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:36:57 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-22856 cnvd-2021-22856 https://cve.radiocsirt.org/vuln/cnvd-2021-22856 https://cve.radiocsirt.org/vuln/euvd-2026-22317 EUVD-2026-22317 https://cve.radiocsirt.org/vuln/euvd-2026-22317 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21626 <p>Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.</p> <p>Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21626 https://cve.radiocsirt.org/vuln/ghsa-7j3x-xm4j-jfj7 <p><strong>Affected:</strong> Maven: io.jenkins.plugins:warnings-ng</p> <p>Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform permission checks in methods implementing form validation.</p> <p>This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A sequence of requests can be used to effectively list workspace contents.</p> <p>Jenkins Warnings Next Generation Plugin 8.5.0 requires Item/Configure permission to validate patterns with workspace contents.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:warnings-ng</p> <p>Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform permission checks in methods implementing form validation.</p> <p>This allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. A sequence of requests can be used to effectively list workspace contents.</p> <p>Jenkins Warnings Next Generation Plugin 8.5.0 requires Item/Configure permission to validate patterns with workspace contents.</p> https://cve.radiocsirt.org/vuln/ghsa-7j3x-xm4j-jfj7 https://cve.radiocsirt.org/vuln/gsd-2021-21626 gsd-2021-21626 https://cve.radiocsirt.org/vuln/gsd-2021-21626