VDB

CISA-2023-24445

CISA-2023-24445 PUBLISHED CVSS 6.1 MEDIUM

Reported by jenkins · Published January 24, 2023

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

Risk Scores

CVSS 3.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Jenkins ProjectJenkins OpenID Pluginunspecified, next of 2.4
Jenkins ProjectJenkins OpenID Pluginunspecified, unspecified, *

Timeline

  • Jan 24, 2023 CVE Published
  • Apr 2, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›