https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:15:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-49803 cnvd-2022-49803 https://cve.radiocsirt.org/vuln/cnvd-2022-49803 https://cve.radiocsirt.org/vuln/euvd-2026-16779 EUVD-2026-16779 https://cve.radiocsirt.org/vuln/euvd-2026-16779 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30971 <p>Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-30971 https://cve.radiocsirt.org/vuln/ghsa-wqmp-2p5r-rhfv <p><strong>Affected:</strong> Maven: org.jvnet.hudson.plugins:storable-configs-plugin</p> <p>Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers with Item/Configure permission to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.</p> <p><strong>Affected:</strong> Maven: org.jvnet.hudson.plugins:storable-configs-plugin</p> <p>Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.</p> <p>This allows attackers with Item/Configure permission to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.</p> https://cve.radiocsirt.org/vuln/ghsa-wqmp-2p5r-rhfv https://cve.radiocsirt.org/vuln/gsd-2022-30971 gsd-2022-30971 https://cve.radiocsirt.org/vuln/gsd-2022-30971 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0090 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0090