CVE-2023-50771 (published 2023-12-13T17:30:18.172Z)
Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Affected products: Vendor: Jenkins Project
Product: Jenkins OpenId Connect Authentication Plugin
Versions: 0