Executive brief
Jenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerability
Affected products
- Maven org.jenkins-ci.plugins:azure-ad
Junglewise Threat Intelligence
CVE-2026-42525: Jenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerability
CVE-2026-42525 · Severity: low · CVSS 3.1 · Published 2026-04-29
Technologies: org.jenkins-ci.plugins:azure-ad (Maven). Vendors: Maven.