https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:32:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-53536 EUVD-2026-53536 https://cve.radiocsirt.org/vuln/euvd-2026-53536 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10309 <p>Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients.</p> <p>Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10309 https://cve.radiocsirt.org/vuln/ghsa-w898-3ph8-5pgm <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:swarm</p> <p>Jenkins Swarm Plugin allows clients to auto-discover Jenkins instances on the same network through a UDP discovery request. Responses to this request are XML documents.</p> <p>Swarm Plugin does not configure the XML parser in a way that would prevent XML External Entity (XXE) processing. This allows unauthenticated attackers on the same network to have Swarm clients parse a maliciously crafted XML response that uses external entities to read arbitrary files from the Swarm client or denial-of-service attacks.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:swarm</p> <p>Jenkins Swarm Plugin allows clients to auto-discover Jenkins instances on the same network through a UDP discovery request. Responses to this request are XML documents.</p> <p>Swarm Plugin does not configure the XML parser in a way that would prevent XML External Entity (XXE) processing. This allows unauthenticated attackers on the same network to have Swarm clients parse a maliciously crafted XML response that uses external entities to read arbitrary files from the Swarm client or denial-of-service attacks.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-w898-3ph8-5pgm https://cve.radiocsirt.org/vuln/gsd-2019-10309 gsd-2019-10309 https://cve.radiocsirt.org/vuln/gsd-2019-10309