org.jenkins-ci.plugins:reverse-proxy-auth-plugin

2 results · Feed

• High 8.8
  CVE-2023-32987

  Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability

  A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.

  Jenkins Project Jenkins Reverse Proxy Auth Plugin org.jenkins-ci.plugins:reverse-proxy-auth-plugin Web / CMS Maven
  May 16, 2023
• Low 3.3
  CVE-2018-1000150

  Jenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in users

  An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allows attackers with local file system access to obtain a list of authorities for logged in users.

  org.jenkins-ci.plugins:reverse-proxy-auth-plugin Maven
  Apr 5, 2018