https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 16:57:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-16720 cnvd-2022-16720 https://cve.radiocsirt.org/vuln/cnvd-2022-16720 https://cve.radiocsirt.org/vuln/euvd-2026-14413 EUVD-2026-14413 https://cve.radiocsirt.org/vuln/euvd-2026-14413 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25188 <p>Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with Item/Configure permission to write or overwrite .xml files on the Jenkins controller file system with content not controllable by the attacker.</p> <p>Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps, allowing attackers with Item/Configure permission to write or overwrite .xml files on the Jenkins controller file system with content not controllable by the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25188 https://cve.radiocsirt.org/vuln/ghsa-23h5-8ph6-7rfc <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:fortify</p> <p>Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the `appName` and `appVersion` parameters of its Pipeline steps, which are used to write to files inside build directories.</p> <p>This allows attackers with Item/Configure permission to write or overwrite `.xml` files on the Jenkins controller file system with content not controllable by the attacker.</p> <p>Jenkins Fortify Plugin 20.2.35 sanitizes the `appName` and `appVersion` parameters of its Pipeline steps when determining the resulting filename.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:fortify</p> <p>Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the `appName` and `appVersion` parameters of its Pipeline steps, which are used to write to files inside build directories.</p> <p>This allows attackers with Item/Configure permission to write or overwrite `.xml` files on the Jenkins controller file system with content not controllable by the attacker.</p> <p>Jenkins Fortify Plugin 20.2.35 sanitizes the `appName` and `appVersion` parameters of its Pipeline steps when determining the resulting filename.</p> https://cve.radiocsirt.org/vuln/ghsa-23h5-8ph6-7rfc https://cve.radiocsirt.org/vuln/gsd-2022-25188 gsd-2022-25188 https://cve.radiocsirt.org/vuln/gsd-2022-25188