Open redirect vulnerability in Jenkins CAS Plugin

2022-05-2419:06:35

Google

osv.dev

0.001 Low

EPSS

Percentile

36.1%

JSON

Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful authentication.

Jenkins CAS Plugin 1.6.1 only redirects to relative (Jenkins) URLs.

CPENameOperatorVersion
org.jenkins-ci.plugins:cas-plugineq1.4.3
org.jenkins-ci.plugins:cas-plugineq1.4.0
org.jenkins-ci.plugins:cas-plugineq1.4.2
org.jenkins-ci.plugins:cas-plugineq1.3.0
org.jenkins-ci.plugins:cas-plugineq1.6.0
org.jenkins-ci.plugins:cas-plugineq1.1.1
org.jenkins-ci.plugins:cas-plugineq1.2.0
org.jenkins-ci.plugins:cas-plugineq1.4.1
org.jenkins-ci.plugins:cas-plugineq1.0.0
org.jenkins-ci.plugins:cas-plugineq1.5.0

Name	Operator	Version
org.jenkins-ci.plugins:cas-plugin	eq	1.4.3
org.jenkins-ci.plugins:cas-plugin	eq	1.4.0
org.jenkins-ci.plugins:cas-plugin	eq	1.4.2
org.jenkins-ci.plugins:cas-plugin	eq	1.3.0
org.jenkins-ci.plugins:cas-plugin	eq	1.6.0
org.jenkins-ci.plugins:cas-plugin	eq	1.1.1
org.jenkins-ci.plugins:cas-plugin	eq	1.2.0
org.jenkins-ci.plugins:cas-plugin	eq	1.4.1
org.jenkins-ci.plugins:cas-plugin	eq	1.0.0
org.jenkins-ci.plugins:cas-plugin	eq	1.5.0