Jenkins GitLab Authentication Plugin User Redirection Vulnerability

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A user redirection vulnerability exists in Jenkins GitLab Authentication Plugin 1.13 and earlier versions, which stems from logging the HTTP Referer header at the beginning of the authentication process as part of the URL query parameter at the beginning of the authentication process, which can be exploited to redirect users to any URL specified by the attacker.