https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:30:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214246 EUVD-2026-214246 https://cve.radiocsirt.org/vuln/euvd-2026-214246 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30523 <p>Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-30523 https://cve.radiocsirt.org/vuln/ghsa-qgw9-vgrf-h723 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:reportportal</p> <p>Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.</p> <p>These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>Additionally, the configuration form does not mask these tokens, increasing the potential for attackers to observe and capture them.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:reportportal</p> <p>Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.</p> <p>These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.</p> <p>Additionally, the configuration form does not mask these tokens, increasing the potential for attackers to observe and capture them.</p> https://cve.radiocsirt.org/vuln/ghsa-qgw9-vgrf-h723 https://cve.radiocsirt.org/vuln/gsd-2023-30523 gsd-2023-30523 https://cve.radiocsirt.org/vuln/gsd-2023-30523 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0952 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0952