org.jenkins-ci.plugins:saml

3 results · Feed

• High 7.5
  CVE-2025-64131

  Jenkins SAML Plugin does not implement a replay cache

  Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenki…

  Jenkins Project Jenkins SAML Plugin org.jenkins-ci.plugins:saml Web / CMS Maven
  Oct 29, 2025
• High 8.8
  CVE-2021-21678

  Jenkins SAML Plugin allows bypassing CSRF protection for any URL

  Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

  Jenkins Project Jenkins SAML Plugin org.jenkins-ci.plugins:saml Web / CMS Maven
  Aug 31, 2021
• Medium 6.5
  CVE-2018-1000602

  Jenkins SAML Plugin Session Fixation vulnerability

  A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session.

  org.jenkins-ci.plugins:saml Maven
  Jun 26, 2018