PT-2019-11767 · Jenkins · Jenkins Gitlab Authentication Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Gitlab Authentication Plugin version 1.4 and earlier Description: A session fixation issue allows unauthorized attackers to impersonate another user if they can control the pre-authentication session. This is due to a vulnerability in...

CVE-2019-10372: URL Redirection to Untrusted Site

An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login...

CVE-2019-10371: Session Fixation

A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

PT-2018-19206

Name of the Vulnerable Software and Affected Versions JupyterHub OAuthenticator versions 0.6.x through 0.6.1 JupyterHub OAuthenticator versions 0.7.x through 0.7.2 Description An issue was discovered in JupyterHub OAuthenticator. When using JupyterHub with GitLab group whitelisting for access...