https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:25:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-211642 EUVD-2026-211642 https://cve.radiocsirt.org/vuln/euvd-2026-211642 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32993 <p>Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.</p> <p>Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-32993 https://cve.radiocsirt.org/vuln/ghsa-6v6h-rw43-97fh <p><strong>Affected:</strong> Maven: io.jenkins.plugins:miniorange-saml-sp</p> <p>Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata.</p> <p>This lack of validation could be abused using a man-in-the-middle attack to intercept these connections.</p> <p>SAML Single Sign On(SSO) Plugin 2.1.0 performs hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:miniorange-saml-sp</p> <p>Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata.</p> <p>This lack of validation could be abused using a man-in-the-middle attack to intercept these connections.</p> <p>SAML Single Sign On(SSO) Plugin 2.1.0 performs hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata.</p> https://cve.radiocsirt.org/vuln/ghsa-6v6h-rw43-97fh https://cve.radiocsirt.org/vuln/gsd-2023-32993 gsd-2023-32993 https://cve.radiocsirt.org/vuln/gsd-2023-32993 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1228 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site-Scripting-Angriff-durchzuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Request-Forgery-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um einen Cross-Site-Scripting-Angriff-durchzuführen, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Request-Forgery-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1228