https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:47:12 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-31659 cnvd-2021-31659 https://cve.radiocsirt.org/vuln/cnvd-2021-31659 https://cve.radiocsirt.org/vuln/euvd-2026-22330 EUVD-2026-22330 https://cve.radiocsirt.org/vuln/euvd-2026-22330 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21645 <p>Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.</p> <p>Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21645 https://cve.radiocsirt.org/vuln/ghsa-2959-fj73-hm8p <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:config-file-provider</p> <p>Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints.</p> <p>This allows attackers with Overall/Read permission to enumerate configuration file IDs.</p> <p>An enumeration of configuration file IDs in Jenkins Config File Provider Plugin 3.7.1 requires the appropriate permissions.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:config-file-provider</p> <p>Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints.</p> <p>This allows attackers with Overall/Read permission to enumerate configuration file IDs.</p> <p>An enumeration of configuration file IDs in Jenkins Config File Provider Plugin 3.7.1 requires the appropriate permissions.</p> https://cve.radiocsirt.org/vuln/ghsa-2959-fj73-hm8p https://cve.radiocsirt.org/vuln/gsd-2021-21645 gsd-2021-21645 https://cve.radiocsirt.org/vuln/gsd-2021-21645 https://cve.radiocsirt.org/vuln/rhba-2021:2407 <p>jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability. jenkins-2-plugins/config-file-provider: Does not perform permission checks in several HTTP endpoints.</p> <p>jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability. jenkins-2-plugins/config-file-provider: Does not perform permission checks in several HTTP endpoints.</p> https://cve.radiocsirt.org/vuln/rhba-2021:2407