Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-33005 EUVD-2023-1656GHSA-xxq2-74hw-vg6m

Jenkins WSO2 Oauth Plugin Session Fixation vulnerability

Published May 16, 2023 · Updated Jan 23, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins WSO2 Oauth Plugin Package: org.jenkins-ci.plugins:wso2id-oauth Category: Web / CMS Ecosystem: Maven

Description

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins WSO2 Oauth Plugin ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:wso2id-oauth <= 1.0 — GHSA-xxq2-74hw-vg6m

Advisories 1

References