Jenkins Project Jenkins Openshift Login Plugin vulnerabilities

2 vulnerabilities

Known vulnerabilities in Jenkins Project Jenkins Openshift Login Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2023-37947jenkins projectjenkins openshift login plugin+2
EPSS score
0.56%
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.8.8CVE-2023-37946jenkins projectjenkins openshift login plugin+2
EPSS score
0.83%
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.