Skip to content
Sign in
4.3 Medium

CVE-2026-42525 Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL…

Description

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Affected products and versions

Product Affected versions Fixed in
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666 earliest → 666.v6060de32f87d No fix stated

Other CVEs of Jenkins Microsoft Entra ID (previously Azure AD) Plugin

The 2 CVEs of Jenkins Microsoft Entra ID (previously Azure AD) Plugin →
CVE-2026-84672 Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions… 8.8 High
Track this CVE