CVE-2023-24445 Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing…

Description

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins openid Plugin 2.4	premières → 2.4	Pas de correctif indiqué

Autres CVE de Jenkins openid Plugin

Les 5 CVE de Jenkins openid Plugin →

CVE-2023-24444 Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login 9.8 Critique CVE-2023-24446 A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick… 8.8 Élevée CVE-2019-1003098 A cross-site request forgery vulnerability in Jenkins openid Plugin in the… Non notée CVE-2019-1003099 A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form… Non notée