VendorsJenkinskeycloak_authenticationall versions
Vulnerabilities

Jenkins Keycloak Authentication

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2023-24456
Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.
Published 2023-01-24 · Modified
9.8EPSS 0.012
CVE-2023-24457
A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.
Published 2023-01-24 · Modified
6.5EPSS 0.010