Skip to content
Sign in
6.5 Medium

CVE-2023-24457 A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected products and versions

Product Affected versions Fixed in
Jenkins Keycloak Authentication Plugin 2.3 earliest → 2.3.0 No fix stated

Other CVEs of Jenkins Keycloak Authentication Plugin

The 3 CVEs of Jenkins Keycloak Authentication Plugin →
CVE-2026-92141 Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing… 4.3 Medium CVE-2023-24456 Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login 9.8 Critical
Track this CVE