https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:05:18 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-33745 cnvd-2020-33745 https://cve.radiocsirt.org/vuln/cnvd-2020-33745 https://cve.radiocsirt.org/vuln/euvd-2026-35875 EUVD-2026-35875 https://cve.radiocsirt.org/vuln/euvd-2026-35875 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2197 <p>Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format.</p> <p>Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2197 https://cve.radiocsirt.org/vuln/ghsa-hj32-9mcw-5cwh <p><strong>Affected:</strong> Maven: hudson.plugins:project-inheritance</p> <p>Jenkins limits access to job configuration XML data (`config.xml`) to users with Job/ExtendedRead permission, typically implied by Job/Configure permission. Project Inheritance Plugin has several job inspection features, including the API URL `/job/…​/getConfigAsXML` for its Inheritance Project job type that does something similar.</p> <p>Project Inheritance Plugin 21.04.03 and earlier does not check permissions for this new endpoint, granting access to job configuration XML data to every user with Job/Read permission.</p> <p>Additionally, the encrypted values of secrets stored in the job configuration are not redacted, as they would be by the `config.xml` API for users without Job/Configure permission.</p> <p><strong>Affected:</strong> Maven: hudson.plugins:project-inheritance</p> <p>Jenkins limits access to job configuration XML data (`config.xml`) to users with Job/ExtendedRead permission, typically implied by Job/Configure permission. Project Inheritance Plugin has several job inspection features, including the API URL `/job/…​/getConfigAsXML` for its Inheritance Project job type that does something similar.</p> <p>Project Inheritance Plugin 21.04.03 and earlier does not check permissions for this new endpoint, granting access to job configuration XML data to every user with Job/Read permission.</p> <p>Additionally, the encrypted values of secrets stored in the job configuration are not redacted, as they would be by the `config.xml` API for users without Job/Configure permission.</p> https://cve.radiocsirt.org/vuln/ghsa-hj32-9mcw-5cwh https://cve.radiocsirt.org/vuln/gsd-2020-2197 gsd-2020-2197 https://cve.radiocsirt.org/vuln/gsd-2020-2197