Jenkins Gitlab Authentication Plugin

3 results · Clear filters · Feed

• Medium 5.4
  CVE-2023-39153

  CSRF vulnerability in GitLab Authentication Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.

  Jenkins Project Jenkins Gitlab Authentication Plugin org.jenkins-ci.plugins:gitlab-oauth Web / CMS Maven
  Jul 26, 2023
• Medium 5.4
  CVE-2022-25196

  Open redirect vulnerability in Jenkins GitLab Authentication Plugin

  Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-…

  Jenkins Project Jenkins Gitlab Authentication Plugin org.jenkins-ci.plugins:gitlab-oauth Web / CMS Maven
  Feb 15, 2022
• Medium 6.1
  CVE-2019-10372

  Jenkins Gitlab Authentication Plugin Open Redirect vulnerability

  An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.

  Jenkins Project Jenkins Gitlab Authentication Plugin org.jenkins-ci.plugins:gitlab-oauth Web / CMS Maven
  Aug 7, 2019