CVE-2023-24445

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-24445

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2023-24445

Aliases

Published

2023-01-26T21:18:18.150Z

Modified

2025-11-15T06:16:13.684566Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.

References

Affected packages

Type: GIT
Repo: https://github.com/jenkinsci/openid-plugin
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

2b0313be8be7b19375de324a9f0e115e711be481

openid-1.0

openid-1.1

openid-1.2

openid-1.3

openid-1.4

openid-1.5

openid-1.6

openid-1.7

openid-1.8

openid-2.0

openid-2.1

openid-2.1.1

openid-2.2

openid-2.3

openid-2.4

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-24445.json"