https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:45:49 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21640 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21640 https://cve.radiocsirt.org/vuln/cnvd-2021-31174 cnvd-2021-31174 https://cve.radiocsirt.org/vuln/cnvd-2021-31174 https://cve.radiocsirt.org/vuln/euvd-2026-22324 EUVD-2026-22324 https://cve.radiocsirt.org/vuln/euvd-2026-22324 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21640 <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21640 https://cve.radiocsirt.org/vuln/ghsa-w2hv-rcqr-2h7r <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name. When a form to create a view is submitted, the name is included twice in the submission. One instance is validated, but the other instance is used to create the value.</p> <p>This allows attackers with View/Create permission to create views with invalid or already-used names.</p> <p>Jenkins 2.287, LTS 2.277.2 uses the same submitted value for validation and view creation.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name. When a form to create a view is submitted, the name is included twice in the submission. One instance is validated, but the other instance is used to create the value.</p> <p>This allows attackers with View/Create permission to create views with invalid or already-used names.</p> <p>Jenkins 2.287, LTS 2.277.2 uses the same submitted value for validation and view creation.</p> https://cve.radiocsirt.org/vuln/ghsa-w2hv-rcqr-2h7r https://cve.radiocsirt.org/vuln/gsd-2021-21640 gsd-2021-21640 https://cve.radiocsirt.org/vuln/gsd-2021-21640 https://cve.radiocsirt.org/vuln/rhsa-2021:1551 <p>golang: math/big: panic during recursive division of very large numbers golang: crypto/elliptic: incorrect operations on the P-224 curve jenkins: lack of type validation in agent related REST API jenkins: view name validation bypass jetty: Symlink directory exposes webapp directory contents jetty: Resource exhaustion when receiving an invalid large TLS frame</p> <p>golang: math/big: panic during recursive division of very large numbers golang: crypto/elliptic: incorrect operations on the P-224 curve jenkins: lack of type validation in agent related REST API jenkins: view name validation bypass jetty: Symlink directory exposes webapp directory contents jetty: Resource exhaustion when receiving an invalid large TLS frame</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1551