~ / search / GHSA-mj62-m63x-mh84

GHSA-mj62-m63x-mh84

Open redirect vulnerability in Jenkins OpenID Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-24445

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:openid <= 2.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

References

External links from the advisory. They lead to third-party sites.