https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:11:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-239409 EUVD-2026-239409 https://cve.radiocsirt.org/vuln/euvd-2026-239409 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47884 <p>In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.</p> <p>In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-47884 https://cve.radiocsirt.org/vuln/ghsa-q7c3-x7hm-qq72 <p><strong>Affected:</strong> Maven: io.jenkins.plugins:oidc-provider</p> <p>In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:oidc-provider</p> <p>In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses potentially overridden values of environment variables, in conjunction with certain other plugins allowing attackers able to configure jobs to craft a build ID Token that impersonates a trusted job, potentially gaining unauthorized access to external services.</p> https://cve.radiocsirt.org/vuln/ghsa-q7c3-x7hm-qq72 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1052 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1052