Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 02:11:58 +0000 cnvd-2019-34781 https://cve.radiocsirt.org/vuln/cnvd-2019-34781 cnvd-2019-34781 https://cve.radiocsirt.org/vuln/cnvd-2019-34781 EUVD-2026-53631 https://cve.radiocsirt.org/vuln/euvd-2026-53631 EUVD-2026-53631 https://cve.radiocsirt.org/vuln/euvd-2026-53631 fkie_cve-2019-10408 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10408 <p>A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates.</p> <p>A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10408 GHSA-xc7q-p3f4-q389 — Jenkins Project Inheritance Plugin vulnerable to Cross-Site Request Forgery https://cve.radiocsirt.org/vuln/ghsa-xc7q-p3f4-q389 <p><strong>Affected:</strong> Maven: hudson.plugins:project-inheritance</p> <p>Project Inheritance Plugin allows the creation of projects based on templates defined in the plugin configuration.</p> <p>A missing permission check in the HTTP endpoint triggering project creation allowed users with Overall/Read permission to create these projects. Additionally, the HTTP endpoint did not require POST requests, resulting in a CSRF vulnerability.</p> <p>The HTTP endpoint triggering project creation now requires Item/Create permission and submission of requests via POST.</p> <p><strong>Affected:</strong> Maven: hudson.plugins:project-inheritance</p> <p>Project Inheritance Plugin allows the creation of projects based on templates defined in the plugin configuration.</p> <p>A missing permission check in the HTTP endpoint triggering project creation allowed users with Overall/Read permission to create these projects. Additionally, the HTTP endpoint did not require POST requests, resulting in a CSRF vulnerability.</p> <p>The HTTP endpoint triggering project creation now requires Item/Create permission and submission of requests via POST.</p> https://cve.radiocsirt.org/vuln/ghsa-xc7q-p3f4-q389 gsd-2019-10408 https://cve.radiocsirt.org/vuln/gsd-2019-10408 gsd-2019-10408 https://cve.radiocsirt.org/vuln/gsd-2019-10408