SUSE CVE-2018-1000174

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login...

CVE-2018-1000174

The CVE-2018-1000174 issue affects Jenkins Google Login Plugin ≤ 1.3, in GoogleOAuth2SecurityRealm.java, enabling an open redirect to an arbitrary URL after login. The root cause is improper redirection handling, leading to potential user redirection to attacker-controlled sites. SUSE/GHSA/OSV re...