Lucene search
GoogleOSV:GHSA-2VVR-5757-QP87HistoryMay 24, 2022 - 7:06 p.m.
Open redirect vulnerability in Jenkins CAS Plugin
2022-05-2419:06:35
Google
osv.dev
13
jenkins
cas plugin
open redirect
vulnerability
phishing
authentication
EPSS
0.001
Percentile
36.1%
Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.
This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful authentication.
Jenkins CAS Plugin 1.6.1 only redirects to relative (Jenkins) URLs.
Related
prion
prion
Design/Logic Flaw
2021-06-30 17:15:00
cvelist
cvelist
CVE-2021-21673
2021-06-30 16:45:20
cve
cve
CVE-2021-21673
2021-06-30 17:15:09
osv
osv
CVE-2021-21673
2021-06-30 17:15:09
nvd
nvd
CVE-2021-21673
2021-06-30 17:15:09
github
github
Open redirect vulnerability in Jenkins CAS Plugin
2022-05-24 19:06:35
nessus
nessus
Jenkins LTS < 2.289.2 / Jenkins weekly < 2.300 Multiple Vulnerabilities
2021-06-30 00:00:00