https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 16:45:07 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-22636 cnvd-2019-22636 https://cve.radiocsirt.org/vuln/cnvd-2019-22636 https://cve.radiocsirt.org/vuln/euvd-2026-53586 EUVD-2026-53586 https://cve.radiocsirt.org/vuln/euvd-2026-53586 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10335 <p>A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in the plugin-provided output on build status pages.</p> <p>A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in the plugin-provided output on build status pages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10335 https://cve.radiocsirt.org/vuln/ghsa-fx9p-2qvx-pgjv <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:electricflow</p> <p>The plugin adds metadata displayed on build pages during its operations.</p> <p>Any user content was not escaped, resulting in a cross-site scripting vulnerability allowing users with Job/Configure permission, or attackers controlling API responses received from ElectricFlow to render arbitrary HTML and JavaScript on Jenkins build pages.</p> <p>Build metadata is now filtered through a HTML formatter that only allows showing basic HTML, neutralizing any unsafe data. Additionally, all builds executed after the security update is applied will now properly escape content received from ElectricFlow.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:electricflow</p> <p>The plugin adds metadata displayed on build pages during its operations.</p> <p>Any user content was not escaped, resulting in a cross-site scripting vulnerability allowing users with Job/Configure permission, or attackers controlling API responses received from ElectricFlow to render arbitrary HTML and JavaScript on Jenkins build pages.</p> <p>Build metadata is now filtered through a HTML formatter that only allows showing basic HTML, neutralizing any unsafe data. Additionally, all builds executed after the security update is applied will now properly escape content received from ElectricFlow.</p> https://cve.radiocsirt.org/vuln/ghsa-fx9p-2qvx-pgjv https://cve.radiocsirt.org/vuln/gsd-2019-10335 gsd-2019-10335 https://cve.radiocsirt.org/vuln/gsd-2019-10335