https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:11:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-204897 EUVD-2026-204897 https://cve.radiocsirt.org/vuln/euvd-2026-204897 https://cve.radiocsirt.org/vuln/fkie_cve-2024-54004 <p>Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.</p> <p>Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-54004 https://cve.radiocsirt.org/vuln/ghsa-fwxq-3f52-5cmc <p><strong>Affected:</strong> Maven: aendter.jenkins.plugins:filesystem-list-parameter-plugin</p> <p>Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter.</p> <p>This allows attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.</p> <p>Filesystem List Parameter Plugin 0.0.15 ensures that paths used by the File system objects list Parameter are restricted to an allow list, with the default base directory set to $JENKINS_HOME/userContent/. The allow list can be configured to include additional custom base directories.</p> <p><strong>Affected:</strong> Maven: aendter.jenkins.plugins:filesystem-list-parameter-plugin</p> <p>Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter.</p> <p>This allows attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.</p> <p>Filesystem List Parameter Plugin 0.0.15 ensures that paths used by the File system objects list Parameter are restricted to an allow list, with the default base directory set to $JENKINS_HOME/userContent/. The allow list can be configured to include additional custom base directories.</p> https://cve.radiocsirt.org/vuln/ghsa-fwxq-3f52-5cmc https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3563 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3563