Jenkins openid Plugin

3 results · Clear filters · Feed

• Medium 6.1
  CVE-2023-24445

  Open redirect vulnerability in Jenkins OpenID Plugin

  Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

  Jenkins Project Jenkins openid Plugin org.jenkins-ci.plugins:openid Web / CMS Maven
  Jan 24, 2023
• Medium 6.5
  CVE-2019-1003098

  Jenkins OpenID Plugin CSRF vulnerability

  A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins openid Plugin org.jenkins-ci.plugins:openid Web / CMS Maven
  Apr 4, 2019
• Medium 6.5
  CVE-2019-1003099

  Jenkins openid Plugin missing permission check

  A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins openid Plugin org.jenkins-ci.plugins:openid Web / CMS Maven
  Apr 4, 2019