Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•0 views

CVE-2023-37947: URL Redirection to Untrusted Site

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks...

6.1CVSS6.4AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•1 views

CVE-2023-37946: Session Fixation

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier does not invalidate the previous session on login...

8.8CVSS7.8AI score0.00833EPSS
SaveExploits0References2
Rows per page
Query Builder