Not rated
CVE-2021-21673 Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to…
Description
Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins CAS Plugin 1.6 | earliest → 1.6.0 | No fix stated |