https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:40:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-17780 EUVD-2026-17780 https://cve.radiocsirt.org/vuln/euvd-2026-17780 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34206 <p>A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL.</p> <p>A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34206 https://cve.radiocsirt.org/vuln/ghsa-v6h8-5cp2-j9w4 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:jianliao</p> <p>Jenkins Jianliao Notification Plugin 1.1 and earlier does not perform a permission check in a method implementing form validation.</p> <p>This allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL.</p> <p>Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:jianliao</p> <p>Jenkins Jianliao Notification Plugin 1.1 and earlier does not perform a permission check in a method implementing form validation.</p> <p>This allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL.</p> <p>Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-v6h8-5cp2-j9w4 https://cve.radiocsirt.org/vuln/gsd-2022-34206 gsd-2022-34206 https://cve.radiocsirt.org/vuln/gsd-2022-34206 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0445