CVE-2023-24445
Assigner: jenkins
Published: 2023-01-24T00:00:00
State: PUBLISHED
affected: product: Jenkins OpenID Plugin
vendor: Jenkins Project
versions: lessThanOrEqual: 2.4
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 2.4
versionType: custom
descriptions: value: Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.