CVE-2019-10372

2019-08-0714:20:24

jenkins

www.cve.org

0.001 Low

EPSS

Percentile

36.1%

JSON

An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.

CNA Affected

[
  {
    "product": "Jenkins Gitlab Authentication Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "1.4 and earlier"
      }
    ]
  }
]