Package · Maven

org.openshift.jenkins:openshift-login

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.8

CVE-2023-37946

Jenkins OpenShift Login Plugin session fixation vulnerability

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.

Jenkins Project Jenkins OpenShift Login Plugin org.openshift.jenkins:openshift-login Web / CMS Maven

Jul 12, 2023
Medium 4.3

CVE-2023-37947

Jenkins OpenShift Login Plugin vulnerable to Open Redirect

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

Jenkins Project Jenkins OpenShift Login Plugin org.openshift.jenkins:openshift-login Web / CMS Maven

Jul 12, 2023