Jenkins Project Jenkins CAS Plugin vulnerabilities
2 vulnerabilities
Known vulnerabilities in Jenkins Project Jenkins CAS Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2021-21673jenkins project · jenkins cas plugin +2 morejenkins project jenkins cas pluginJenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.EPSS1.58%HighCVE-2023-32997jenkins project · jenkins cas plugin +2 morejenkins project jenkins cas pluginJenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login.EPSS0.79%