Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 16:05:24 +0000 cnvd-2019-22637 https://cve.radiocsirt.org/vuln/cnvd-2019-22637 cnvd-2019-22637 https://cve.radiocsirt.org/vuln/cnvd-2019-22637 EUVD-2026-53621 https://cve.radiocsirt.org/vuln/euvd-2026-53621 EUVD-2026-53621 https://cve.radiocsirt.org/vuln/euvd-2026-53621 fkie_cve-2019-10333 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10333 <p>Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read access to obtain information about the Jenkins ElectricFlow Plugin configuration and configuration of connected ElectricFlow instances.</p> <p>Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read access to obtain information about the Jenkins ElectricFlow Plugin configuration and configuration of connected ElectricFlow instances.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10333 GHSA-m8f2-9282-x38v — Jenkins ElectricFlow Plugin Missing permission checks https://cve.radiocsirt.org/vuln/ghsa-m8f2-9282-x38v <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:electricflow</p> <p>Various form validation and form autocompletion methods in CloudBees CD Plugin lacked permission checks. This allowed attackers with Overall/Read access to obtain information about the configuration of CloudBees CD Plugin, as well as the configuration and data of connected ElectricFlow servers.</p> <p>These form validation and autocompletion methods now require Overall/Administer or Job/Configure permission, as appropriate for the given method.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:electricflow</p> <p>Various form validation and form autocompletion methods in CloudBees CD Plugin lacked permission checks. This allowed attackers with Overall/Read access to obtain information about the configuration of CloudBees CD Plugin, as well as the configuration and data of connected ElectricFlow servers.</p> <p>These form validation and autocompletion methods now require Overall/Administer or Job/Configure permission, as appropriate for the given method.</p> https://cve.radiocsirt.org/vuln/ghsa-m8f2-9282-x38v gsd-2019-10333 https://cve.radiocsirt.org/vuln/gsd-2019-10333 gsd-2019-10333 https://cve.radiocsirt.org/vuln/gsd-2019-10333