Lucene search
PRIOn knowledge basePRION:CVE-2022-25196HistoryFeb 15, 2022 - 5:15 p.m.
Authentication flaw
2022-02-1517:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
22.0%
Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab_authentication | le | 1.13 |
Related
osv
osv
Open redirect vulnerability in Jenkins GitLab Authentication Plugin
2022-02-16 00:01:22
CVE-2022-25196
2022-02-15 17:15:10
nvd
nvd
CVE-2022-25196
2022-02-15 17:15:10
cve
cve
CVE-2022-25196
2022-02-15 17:15:10
github
github
Open redirect vulnerability in Jenkins GitLab Authentication Plugin
2022-02-16 00:01:22
cvelist
cvelist
CVE-2022-25196
2022-02-15 16:11:26
cnvd
cnvd
Jenkins GitLab Authentication Plugin User Redirection Vulnerability
2022-03-03 00:00:00
