Aller au contenu
Se connecter
6.5 Moyenne

CVE-2023-24457 A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Keycloak Authentication Plugin 2.3 premières → 2.3.0 Pas de correctif indiqué

Autres CVE de Jenkins Keycloak Authentication Plugin

Les 3 CVE de Jenkins Keycloak Authentication Plugin →
CVE-2026-92141 Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing… 4.3 Moyenne CVE-2023-24456 Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login 9.8 Critique
Suivre cette CVE