CVE-2025-64131

The Jenkins SAML Plugin versions 4.583.vc68232f7018a_ and earlier are vulnerable to a replay attack because they do not implement a replay cache in the SAML authentication flow. An attacker who intercepts SAML authentication messages between a user's web browser and Jenkins can replay those reque...