https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:20:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07534 bdu:2023-07534 https://cve.radiocsirt.org/vuln/bdu:2023-07534 https://cve.radiocsirt.org/vuln/euvd-2026-223644 EUVD-2026-223644 https://cve.radiocsirt.org/vuln/euvd-2026-223644 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25765 <p>In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.</p> <p>In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25765 https://cve.radiocsirt.org/vuln/ghsa-c9c2-wcxh-3w5j <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:email-ext</p> <p>In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:email-ext</p> <p>In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.</p> https://cve.radiocsirt.org/vuln/ghsa-c9c2-wcxh-3w5j https://cve.radiocsirt.org/vuln/gsd-2023-25765 gsd-2023-25765 https://cve.radiocsirt.org/vuln/gsd-2023-25765 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0397 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0397