← Database

CVE-2023-24445

MEDIUM CVSS: 6.1 Published: 2023-01-26 Modified: 2026-06-17

Description

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

Affected Platforms

Jenkins Openid

Weakness Type

CWE-601, CWE-601

References