Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 16:41:58 +0000 cnvd-2019-22639 https://cve.radiocsirt.org/vuln/cnvd-2019-22639 cnvd-2019-22639 https://cve.radiocsirt.org/vuln/cnvd-2019-22639 EUVD-2026-53575 https://cve.radiocsirt.org/vuln/euvd-2026-53575 EUVD-2026-53575 https://cve.radiocsirt.org/vuln/euvd-2026-53575 fkie_cve-2019-10332 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10332 <p>A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials.</p> <p>A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10332 GHSA-66r6-rvv9-9x6m — Jenkins ElectricFlow Plugin missing permission check https://cve.radiocsirt.org/vuln/ghsa-66r6-rvv9-9x6m <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:electricflow</p> <p>A missing permission check in a form validation method in CloudBees CD Plugin allowed users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified username and password.</p> <p>Additionally, the form validation method did not require POST requests, resulting in a CSRF vulnerability.</p> <p>This form validation method now requires POST requests and Overall/Administer permissions.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:electricflow</p> <p>A missing permission check in a form validation method in CloudBees CD Plugin allowed users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified username and password.</p> <p>Additionally, the form validation method did not require POST requests, resulting in a CSRF vulnerability.</p> <p>This form validation method now requires POST requests and Overall/Administer permissions.</p> https://cve.radiocsirt.org/vuln/ghsa-66r6-rvv9-9x6m gsd-2019-10332 https://cve.radiocsirt.org/vuln/gsd-2019-10332 gsd-2019-10332 https://cve.radiocsirt.org/vuln/gsd-2019-10332