209 matches found
CVE-2023-37946
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier does not invalidate the previous session on login...
CVE-2023-37947
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks...
CVE-2023-37946
CVE-2023-37946 concerns the Jenkins OpenShift Login Plugin (versions up to 1.1.0.227.v27e08dfb_1a_20 and earlier) where login does not invalidate the previous session, enabling session fixation. The CVSSv3.1 base score is 8.8 (HIGH) with NETWORK attack vector, user interaction required. Red Hat a...
CVE-2023-37947
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks...
CVE-2023-37947
CVE-2023-37947 affects the Jenkins OpenShift Login Plugin. The vulnerability is an open redirect: plugin versions 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determine that a login-redirect URL legitimately points to Jenkins, enabling phishing by redirecting victims to a malicious site after...
CVE-2023-37946
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier does not invalidate the previous session on login...
CVE-2023-37947
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb1a20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks...
Jenkins Plugin OpenShift Login 授权问题漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Jenkins Plugin OpenShift Login 输入验证错误漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...
CVE-2023-27624
CVE-2023-27624 affects WordPress plugin “Marcelotorres Redirect After Login”
CVE-2023-33313
Cross-Site Request Forgery CSRF vulnerability in ThemeinProgress WIP Custom Login plugin = 1.2.9 versions...
CVE-2023-33313 WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ThemeinProgress WIP Custom Login plugin = 1.2.9 versions...
CVE-2023-27425
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...
CVE-2023-27425
CVE-2023-27425 affects the WordPress plugin Electric Studio Client Login (James Irving-Swift) <= 0.8.1. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw exploitable by users with admin+ privileges, caused by inadequate input cleanup/output handling. Affected version scope is limit...
CVE-2022-38063
Cross-Site Request Forgery CSRF vulnerability in Social Login WP plugin = 5.0.0.0 versions...
CVE-2022-38063 WordPress Social Login WP Plugin <= 5.0.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Social Login WP plugin = 5.0.0.0 versions...
PT-2023-13579 · WordPress · Social Login
Name of the Vulnerable Software and Affected Versions: Social Login WP plugin versions = 5.0.0.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
PT-2023-20393 · Cozmoslabs · Client Portal – Private User Pages/Login Plugin
Name of the Vulnerable Software and Affected Versions: Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin versions = 1.1.8 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an...
WordPress When Last Login Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software When Last Login Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27461 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0d8409181044 Credits Muhammad Daffa...
Malicious Package
Overview hermione-login-plugin is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...