https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:02:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-201544 EUVD-2026-201544 https://cve.radiocsirt.org/vuln/euvd-2026-201544 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52552 <p>Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.</p> <p>Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-52552 https://cve.radiocsirt.org/vuln/ghsa-8886-8v27-85j8 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:authorize-project</p> <p>Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Authorize Project Plugin 1.8.0 no longer evaluates a string containing the job name with JavaScript on the Authorization view.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:authorize-project</p> <p>Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Authorize Project Plugin 1.8.0 no longer evaluates a string containing the job name with JavaScript on the Authorization view.</p> https://cve.radiocsirt.org/vuln/ghsa-8886-8v27-85j8 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456 <p>Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter authentisierter Angreifer oder ein anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, sich erhöhte Rechte zu verschaffen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3456