<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: azure service fabric</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-21195: Improper link resolution before file access (&#x27;link following&#x27;) in Service Fabric allows an authorized attacker</title><link>https://patchthecve.com/cve/CVE-2025-21195.html</link><guid>https://patchthecve.com/cve/CVE-2025-21195.html</guid><pubDate>Wed, 17 Jun 2026 08:42:44 +0000</pubDate><description>MEDIUM 6.0: Improper link resolution before file access (&#x27;link following&#x27;) in Service Fabric allows an authorized attacker to elevate privileges locally.</description></item><item><title>CVE-2025-24403: A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overal</title><link>https://patchthecve.com/cve/CVE-2025-24403.html</link><guid>https://patchthecve.com/cve/CVE-2025-24403.html</guid><pubDate>Wed, 17 Jun 2026 08:58:58 +0000</pubDate><description>MEDIUM 4.3: A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins.</description></item><item><title>CVE-2025-24402: A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allow</title><link>https://patchthecve.com/cve/CVE-2025-24402.html</link><guid>https://patchthecve.com/cve/CVE-2025-24402.html</guid><pubDate>Wed, 17 Jun 2026 08:58:58 +0000</pubDate><description>MEDIUM 4.3: A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method.</description></item><item><title>CVE-2024-43480: Azure Service Fabric for Linux Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-43480.html</link><guid>https://patchthecve.com/cve/CVE-2024-43480.html</guid><pubDate>Wed, 17 Jun 2026 07:51:07 +0000</pubDate><description>MEDIUM 6.6: Azure Service Fabric for Linux Remote Code Execution Vulnerability</description></item></channel></rss>