Org.jenkins-ci.plugins:openid

This hub aggregates every CVE we track for Org.jenkins-ci.plugins:openid, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Org.jenkins-ci.plugins:openid.

• CVE-2023-24446A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account.8.8Jan 24, 2023
• CVE-2023-24444Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.9.8Jan 24, 2023
• CVE-2023-24445Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.6.1Jan 24, 2023
• CVE-2019-1003098A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an at...6.5Apr 4, 2019
• CVE-2019-1003099A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connec...6.5Apr 4, 2019