GitHub Advisoryadvisory · Maven

GHSA-mqgf-4rw4-2cq2 Jenkins affected by Open Redirect Vulnerability

LOW Published 2022-05-14 Modified 2025-03-13 Official page ↗
Aliases
CVE-2012-6073
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-20, CWE-601
Reviewed
2025-03-13

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: < 1.480.1 → fixed in 1.480.1 • Maven org.jenkins-ci.main:jenkins-core: >= 1.481, < 1.491 → fixed in 1.491

Description

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2012-6073 Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-601 URL Redirection to Untrusted Site weakness

References