Lucene search

K
osvGoogleOSV:GHSA-PG59-2W33-8VMC
HistoryMay 24, 2022 - 4:52 p.m.

Jenkins Gitlab Authentication Plugin Open Redirect vulnerability

2022-05-2416:52:45
Google
osv.dev
11

0.001 Low

EPSS

Percentile

36.1%

GitLab Authentication Plugin records the HTTP Referer header when the authentication process starts and redirects users to that URL when the user has finished logging in.

This implements an open redirect, allowing malicious sites to implement a phishing attack, with users expecting they have just logged in to Jenkins.

0.001 Low

EPSS

Percentile

36.1%

Related for OSV:GHSA-PG59-2W33-8VMC