https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:41:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-260057 EUVD-2026-260057 https://cve.radiocsirt.org/vuln/euvd-2026-260057 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58458 <p>In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.</p> <p>In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-58458 https://cve.radiocsirt.org/vuln/ghsa-g2pq-9jr7-w6gv <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:git-client</p> <p>In Jenkins Git client Plugin 6.3.2 and earlier, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:git-client</p> <p>In Jenkins Git client Plugin 6.3.2 and earlier, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/ghsa-g2pq-9jr7-w6gv https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1966 <p>Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.</p> <p>Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in Jenkins-Plugins ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1966