https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:25:28 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21639 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21639 https://cve.radiocsirt.org/vuln/cnvd-2021-31175 cnvd-2021-31175 https://cve.radiocsirt.org/vuln/cnvd-2021-31175 https://cve.radiocsirt.org/vuln/euvd-2026-22335 EUVD-2026-22335 https://cve.radiocsirt.org/vuln/euvd-2026-22335 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21639 <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21639 https://cve.radiocsirt.org/vuln/ghsa-pvwx-3jx5-24r2 <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node.</p> <p>This allows attackers with Computer/Configure permission to replace a node with one of a different type.</p> <p>Jenkins 2.287, LTS 2.277.2 validates the type of object created and rejects objects of unexpected types.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node.</p> <p>This allows attackers with Computer/Configure permission to replace a node with one of a different type.</p> <p>Jenkins 2.287, LTS 2.277.2 validates the type of object created and rejects objects of unexpected types.</p> https://cve.radiocsirt.org/vuln/ghsa-pvwx-3jx5-24r2 https://cve.radiocsirt.org/vuln/gsd-2021-21639 gsd-2021-21639 https://cve.radiocsirt.org/vuln/gsd-2021-21639 https://cve.radiocsirt.org/vuln/rhsa-2021:1551 <p>golang: math/big: panic during recursive division of very large numbers golang: crypto/elliptic: incorrect operations on the P-224 curve jenkins: lack of type validation in agent related REST API jenkins: view name validation bypass jetty: Symlink directory exposes webapp directory contents jetty: Resource exhaustion when receiving an invalid large TLS frame</p> <p>golang: math/big: panic during recursive division of very large numbers golang: crypto/elliptic: incorrect operations on the P-224 curve jenkins: lack of type validation in agent related REST API jenkins: view name validation bypass jetty: Symlink directory exposes webapp directory contents jetty: Resource exhaustion when receiving an invalid large TLS frame</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1551