Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 13:57:45 +0000 cnvd-2022-54927 https://cve.radiocsirt.org/vuln/cnvd-2022-54927 cnvd-2022-54927 https://cve.radiocsirt.org/vuln/cnvd-2022-54927 EUVD-2026-15667 https://cve.radiocsirt.org/vuln/euvd-2026-15667 EUVD-2026-15667 https://cve.radiocsirt.org/vuln/euvd-2026-15667 fkie_cve-2022-28138 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28138 <p>A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.</p> <p>A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-28138 GHSA-x25h-f84x-wh4m — CSRF vulnerability in Jenkins RocketChat Notifier Plugin https://cve.radiocsirt.org/vuln/ghsa-x25h-f84x-wh4m <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:rocketchatnotifier</p> <p>Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation.</p> <p>This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential.</p> <p>Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.</p> <p>RocketChat Notifier Plugin 1.5.0 requires POST requests and Overall/Administer permission for the affected form validation method.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:rocketchatnotifier</p> <p>Jenkins RocketChat Notifier Plugin 1.4.10 and earlier does not perform a permission check in a method implementing form validation.</p> <p>This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credential.</p> <p>Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.</p> <p>RocketChat Notifier Plugin 1.5.0 requires POST requests and Overall/Administer permission for the affected form validation method.</p> https://cve.radiocsirt.org/vuln/ghsa-x25h-f84x-wh4m gsd-2022-28138 https://cve.radiocsirt.org/vuln/gsd-2022-28138 gsd-2022-28138 https://cve.radiocsirt.org/vuln/gsd-2022-28138