https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:03:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-217358 EUVD-2026-217358 https://cve.radiocsirt.org/vuln/euvd-2026-217358 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28152 <p>In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy &#34;Forks in the same account&#34; allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.</p> <p>In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy &#34;Forks in the same account&#34; allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28152 https://cve.radiocsirt.org/vuln/ghsa-m4rm-x2rr-357w <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source</p> <p>In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy &#34;Forks in the same account&#34; allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source</p> <p>In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the trust policy &#34;Forks in the same account&#34; allows changes to Jenkinsfiles from users without write access to the project when using Bitbucket Server.</p> https://cve.radiocsirt.org/vuln/ghsa-m4rm-x2rr-357w https://cve.radiocsirt.org/vuln/gsd-2024-28152 gsd-2024-28152 https://cve.radiocsirt.org/vuln/gsd-2024-28152 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0564