CVE-2023-24456 Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login

Description

Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Keycloak Authentication Plugin 2.3	premières → 2.3.0	Pas de correctif indiqué

Autres CVE de Jenkins Keycloak Authentication Plugin

Les 3 CVE de Jenkins Keycloak Authentication Plugin →

CVE-2026-92141 Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing… 4.3 Moyenne CVE-2023-24457 A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows… 6.5 Moyenne