Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:42:49 +0000 cnvd-2020-33744 https://cve.radiocsirt.org/vuln/cnvd-2020-33744 cnvd-2020-33744 https://cve.radiocsirt.org/vuln/cnvd-2020-33744 EUVD-2026-35855 https://cve.radiocsirt.org/vuln/euvd-2026-35855 EUVD-2026-35855 https://cve.radiocsirt.org/vuln/euvd-2026-35855 fkie_cve-2020-2196 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2196 <p>Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.</p> <p>Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2196 GHSA-rp4x-xpgf-4xv7 — Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection https://cve.radiocsirt.org/vuln/ghsa-rp4x-xpgf-4xv7 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:selenium</p> <p>Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints.</p> <p>This allows attackers to perform the following actions: - Restart the Selenium Grid hub. - Delete or replace the plugin configuration. - Start, stop, or restart Selenium configurations on specific nodes.</p> <p>Through carefully chosen configuration parameters, these actions can result in OS command injection on the Jenkins controller.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:selenium</p> <p>Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints.</p> <p>This allows attackers to perform the following actions: - Restart the Selenium Grid hub. - Delete or replace the plugin configuration. - Start, stop, or restart Selenium configurations on specific nodes.</p> <p>Through carefully chosen configuration parameters, these actions can result in OS command injection on the Jenkins controller.</p> https://cve.radiocsirt.org/vuln/ghsa-rp4x-xpgf-4xv7 gsd-2020-2196 https://cve.radiocsirt.org/vuln/gsd-2020-2196 gsd-2020-2196 https://cve.radiocsirt.org/vuln/gsd-2020-2196