CVEvulnerability

CVE-2018-1000174

6.1 MEDIUM Published 2018-05-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.

Affected configurations

• jenkins google login (<= 1.3)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References