6.1
Medium
CVE-2022-46683 Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is…
Description
Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Google Login Plugin 1.6 | earliest → 1.6 | No fix stated |
| Jenkins Google Login Plugin 1.4 | 1.4 → latest | No fix stated |