Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 13:10:55 +0000 cnvd-2021-36577 https://cve.radiocsirt.org/vuln/cnvd-2021-36577 cnvd-2021-36577 https://cve.radiocsirt.org/vuln/cnvd-2021-36577 EUVD-2026-22340 https://cve.radiocsirt.org/vuln/euvd-2026-22340 EUVD-2026-22340 https://cve.radiocsirt.org/vuln/euvd-2026-22340 fkie_cve-2021-21652 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21652 <p>A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> <p>A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21652 GHSA-rrvg-2c69-p9rf — CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials https://cve.radiocsirt.org/vuln/ghsa-rrvg-2c69-p9rf <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:xray-connector</p> <p>Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not require POST requests for a connection test method, resulting in a cross-site request forgery (CSRF) vulnerability.</p> <p>This vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> <p>Jenkins Xray - Test Management for Jira Plugin 2.4.1 requires POST requests for the affected connection test method.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:xray-connector</p> <p>Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not require POST requests for a connection test method, resulting in a cross-site request forgery (CSRF) vulnerability.</p> <p>This vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.</p> <p>Jenkins Xray - Test Management for Jira Plugin 2.4.1 requires POST requests for the affected connection test method.</p> https://cve.radiocsirt.org/vuln/ghsa-rrvg-2c69-p9rf gsd-2021-21652 https://cve.radiocsirt.org/vuln/gsd-2021-21652 gsd-2021-21652 https://cve.radiocsirt.org/vuln/gsd-2021-21652