Executive brief
Open redirect vulnerability in Jenkins GitLab Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:gitlab-oauth
Junglewise Threat Intelligence
CVE-2022-25196: Open redirect vulnerability in Jenkins GitLab Authentication Plugin
CVE-2022-25196 · Severity: low · CVSS 3.1 · Published 2022-02-16
Technologies: org.jenkins-ci.plugins:gitlab-oauth (Maven). Vendors: Maven.
Related threats
- CSRF vulnerability in GitLab Authentication Plugin
- Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
- Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
- Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation
- Client Secret stored in plain text by Jenkins GitLab Authentication Plugin