https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:30:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-329843 EUVD-2026-329843 https://cve.radiocsirt.org/vuln/euvd-2026-329843 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57303 <p>Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.</p> <p>Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57303 https://cve.radiocsirt.org/vuln/ghsa-2q27-6p2h-q6r3 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:assembla</p> <p>Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when parsing responses from the configured Assembla server.</p> <p>This allows attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:assembla</p> <p>Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when parsing responses from the configured Assembla server.</p> <p>This allows attackers able to control the responses of the configured Assembla server to extract secrets from the Jenkins controller or perform server-side request forgery.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-2q27-6p2h-q6r3 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen zu manipulieren oder offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2074