https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 18:12:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-17203 cnvd-2020-17203 https://cve.radiocsirt.org/vuln/cnvd-2020-17203 https://cve.radiocsirt.org/vuln/euvd-2026-53702 EUVD-2026-53702 https://cve.radiocsirt.org/vuln/euvd-2026-53702 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10465 <p>A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.</p> <p>A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10465 https://cve.radiocsirt.org/vuln/ghsa-89vj-rqv8-7737 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:weblogic-deployer-plugin</p> <p>JenkinsDeploy WebLogic Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to send an HTTP HEAD request to a user-specified URL, or confirm the existence of any file or directory on the Jenkins controller.</p> <p>Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:weblogic-deployer-plugin</p> <p>JenkinsDeploy WebLogic Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to send an HTTP HEAD request to a user-specified URL, or confirm the existence of any file or directory on the Jenkins controller.</p> <p>Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-89vj-rqv8-7737 https://cve.radiocsirt.org/vuln/gsd-2019-10465 gsd-2019-10465 https://cve.radiocsirt.org/vuln/gsd-2019-10465