Open redirect vulnerability in Jenkins OpenID Plugin

2023-01-2621:30:18

Google

osv.dev

0.001 Low

EPSS

Percentile

26.7%

JSON

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

CPENameOperatorVersion
org.jenkins-ci.plugins:openideq1.7
org.jenkins-ci.plugins:openideq1.6
org.jenkins-ci.plugins:openideq2.3
org.jenkins-ci.plugins:openideq1.8
org.jenkins-ci.plugins:openideq2.4
org.jenkins-ci.plugins:openideq2.1
org.jenkins-ci.plugins:openideq2.0
org.jenkins-ci.plugins:openideq1.1
org.jenkins-ci.plugins:openideq2.2
org.jenkins-ci.plugins:openideq1.3

Name	Operator	Version
org.jenkins-ci.plugins:openid	eq	1.7
org.jenkins-ci.plugins:openid	eq	1.6
org.jenkins-ci.plugins:openid	eq	2.3
org.jenkins-ci.plugins:openid	eq	1.8
org.jenkins-ci.plugins:openid	eq	2.4
org.jenkins-ci.plugins:openid	eq	2.1
org.jenkins-ci.plugins:openid	eq	2.0
org.jenkins-ci.plugins:openid	eq	1.1
org.jenkins-ci.plugins:openid	eq	2.2
org.jenkins-ci.plugins:openid	eq	1.3