VendorsJenkinsopenshift_loginany version
Vulnerabilities

Jenkins Openshift Login any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-37946
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.
Published 2023-07-12 · Modified
8.8EPSS 0.008
CVE-2023-37947
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Published 2023-07-12 · Modified
6.1EPSS 0.006