Jenkins Plugin GitLab 存储型跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://isecurity.huawei.com/security/wiki/ips/detail?threatId=723680

Related Vulnerabilities

• PoCCVE-2026-86242: Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch
• PoCCVE-2026-61560: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
• PoCCVE-2026-80099: Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret
• PoCCVE-2026-84434: WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload
• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
• PoCCVE-2026-85706: GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
• Jenkins 代码执行漏洞（CVE-2026-84645）
• JeecgBoot 积木报表 /jmreport/auto/export/python/plugin 代码执行漏洞
• GitLab CE/EE /api/graphql 未授权访问漏洞（CVE-2026-19478）
• PoCCVE-2025-14998: Branda WordPress plugin - Privilege Escalation
• PoCCVE-2026-19478: GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation
• PoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
• PoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization