https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:34:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13362 bdu:2025-13362 https://cve.radiocsirt.org/vuln/bdu:2025-13362 https://cve.radiocsirt.org/vuln/bit-jenkins-2025-59475 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2025-59475 https://cve.radiocsirt.org/vuln/euvd-2026-260063 EUVD-2026-260063 https://cve.radiocsirt.org/vuln/euvd-2026-260063 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59475 <p>Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).</p> <p>Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-59475 https://cve.radiocsirt.org/vuln/ghsa-223m-4rfp-646h <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).</p> <p>Jenkins 2.528, LTS 2.516.3 requires Overall/Read permission to list various items in authenticated user profile dropdown menus.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu. This allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).</p> <p>Jenkins 2.528, LTS 2.516.3 requires Overall/Read permission to list various items in authenticated user profile dropdown menus.</p> https://cve.radiocsirt.org/vuln/ghsa-223m-4rfp-646h https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2086 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Dateien zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2086