Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:50:58 +0000 CVE-2026-53440 https://db.gcve.eu/vuln/cve-2026-53440 <p><strong>Affected:</strong> Jenkins Project Jenkins</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> <p><strong>Affected:</strong> Jenkins Project Jenkins</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> https://db.gcve.eu/vuln/cve-2026-53440 GHSA-92m7-4fpw-2wxm — Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container" https://db.gcve.eu/vuln/ghsa-92m7-4fpw-2wxm <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the &#34;from&#34; parameter in the &#34;Delegate to servlet container&#34; security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain.</p> https://db.gcve.eu/vuln/ghsa-92m7-4fpw-2wxm