Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-50771
HistoryDec 13, 2023 - 6:15 p.m.

Design/Logic Flaw

2023-12-1318:15:00
PRIOn knowledge base
www.prio-n.com
5
jenkins
openid connect
authentication
plugin
flaw
redirect url
phishing
attack

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

CPENameOperatorVersion
openidle2.6

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2023-50771