← Database

CVE-2022-46683

MEDIUM CVSS: 6.1 Published: 2022-12-12 Modified: 2026-06-17

Description

Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

Affected Platforms

Jenkins Google Login

Weakness Type

CWE-601, CWE-601

References