BIT-JENKINS-2026-53437

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between //, allowing attackers to perform phishing attacks...

CVE-2026-53437

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains tab or newline characters between //, allowing attackers to perform phishing attacks...

CVE-2026-53437

Jenkins versions 2.567 and earlier (and LTS 2.555.2 and earlier ) are vulnerable to an open redirect flaw. The software fails to properly validate redirect URLs after a login, specifically failing to recognize that URLs containing tab or newline characters between // are not legitimate internal J...