Vulnerabilities > Jenkins > Openid Connect Authentication > 2.6
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-12-13 | CVE-2023-50771 | Open Redirect vulnerability in Jenkins Openid Connect Authentication Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks. | 6.1 |