CVE-2023-37947
Assigner: jenkins
Published: 2023-07-12T15:52:49.789Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Jenkins OpenShift Login Plugin
vendor: Jenkins Project
versions: lessThanOrEqual: 1.1.0.227.v27e08dfb_1a_20
status: affected
version: 0
versionType: maven
descriptions: value: Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.