https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 05:53:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-241536 EUVD-2026-241536 https://cve.radiocsirt.org/vuln/euvd-2026-241536 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41231 <p>Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.</p> <p>Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41231 https://cve.radiocsirt.org/vuln/ghsa-jrqh-c9v8-ccx9 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:build-publisher</p> <p>Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system by providing a crafted file name to an API endpoint. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability that allows attackers to replace any `config.xml` file on the Jenkins controller file system with an empty file.</p> <p>There is currently no known workaround or fix, and this plugin has been suspended.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:build-publisher</p> <p>Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any `config.xml` file on the Jenkins controller file system by providing a crafted file name to an API endpoint. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability that allows attackers to replace any `config.xml` file on the Jenkins controller file system with an empty file.</p> <p>There is currently no known workaround or fix, and this plugin has been suspended.</p> https://cve.radiocsirt.org/vuln/ghsa-jrqh-c9v8-ccx9 https://cve.radiocsirt.org/vuln/gsd-2022-41231 gsd-2022-41231 https://cve.radiocsirt.org/vuln/gsd-2022-41231