https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 13:00:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233115 EUVD-2026-233115 https://cve.radiocsirt.org/vuln/euvd-2026-233115 https://cve.radiocsirt.org/vuln/fkie_cve-2022-46686 <p>Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values.</p> <p>Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-46686 https://cve.radiocsirt.org/vuln/ghsa-5g2c-j6v9-vf94 <p><strong>Affected:</strong> Maven: io.jenkins.plugins:custom-build-properties</p> <p>Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values. Custom Build Properties Plugin 2.82.v16d5b_d3590c7 escapes property values and build display names on the Custom Build Properties and Build Summary pages.</p> <p><strong>Affected:</strong> Maven: io.jenkins.plugins:custom-build-properties</p> <p>Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom Build Properties and Build Summary pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set or change these values. Custom Build Properties Plugin 2.82.v16d5b_d3590c7 escapes property values and build display names on the Custom Build Properties and Build Summary pages.</p> https://cve.radiocsirt.org/vuln/ghsa-5g2c-j6v9-vf94 https://cve.radiocsirt.org/vuln/gsd-2022-46686 gsd-2022-46686 https://cve.radiocsirt.org/vuln/gsd-2022-46686 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2262 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2262