CVE-2023-37947 (published 2023-07-12T15:52:49.789Z)
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Affected products: Vendor: Jenkins Project
Product: Jenkins OpenShift Login Plugin
Versions: 0