Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Jenkins OpenID Plugin unspecified Clear all filters
TI-2023-10068 CVE-2023-24446 · GHSA-96jv-c7m6-q43g

Cross-site request forgery in Jenkins OpenID Plugin

Priority MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00571 Published 2023-01-24 No fix listed CWE-352
TI-2023-10067 CVE-2023-24445 · GHSA-mj62-m63x-mh84

Open redirect in Jenkins OpenID Plugin

Priority LOW 28

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2023-01-24 No fix listed CWE-601