Lucene search
PRIOn knowledge basePRION:CVE-2023-37947HistoryJul 12, 2023 - 4:15 p.m.
Design/Logic Flaw
2023-07-1216:15:00
PRIOn knowledge base
www.prio-n.com
7
jenkins
openshift
phishing
0.001 Low
EPSS
Percentile
19.4%
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openshift_login | eq | < 1.1.0.230.v5d7030b-f5432 |
Related
cvelist
cvelist
CVE-2023-37947
2023-07-12 15:52:49
osv
osv
Jenkins OpenShift Login Plugin vulnerable to Open Redirect
2023-07-12 18:30:38
github
github
Jenkins OpenShift Login Plugin vulnerable to Open Redirect
2023-07-12 18:30:38
nvd
nvd
CVE-2023-37947
2023-07-12 16:15:13
redhatcve
redhatcve
CVE-2023-37947
2023-07-17 17:12:01
cve
cve
CVE-2023-37947
2023-07-12 16:15:13
redhat
redhat
(RHSA-2024:0777) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:20:42
(RHSA-2024:0778) Important: Jenkins and Jenkins-2-plugins security update
2024-02-12 10:30:15
nessus
nessus
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0777)
2024-04-28 00:00:00
RHEL 8 : Jenkins and Jenkins-2-plugins (RHSA-2024:0778)
2024-04-29 00:00:00