https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:06:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-17782 EUVD-2026-17782 https://cve.radiocsirt.org/vuln/euvd-2026-17782 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34181 <p>Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn&#39;t exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.</p> <p>Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn&#39;t exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34181 https://cve.radiocsirt.org/vuln/ghsa-298j-9q4w-6rm4 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:xunit</p> <p>xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn’t exist, and parsing files inside it as test results.</p> <p>This allows attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.</p> <p>xUnit Plugin 3.1.0 changes the message type from agent-to-controller to controller-to-agent, preventing execution on the controller.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:xunit</p> <p>xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn’t exist, and parsing files inside it as test results.</p> <p>This allows attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.</p> <p>xUnit Plugin 3.1.0 changes the message type from agent-to-controller to controller-to-agent, preventing execution on the controller.</p> https://cve.radiocsirt.org/vuln/ghsa-298j-9q4w-6rm4 https://cve.radiocsirt.org/vuln/gsd-2022-34181 gsd-2022-34181 https://cve.radiocsirt.org/vuln/gsd-2022-34181 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445