GitHub Advisoryadvisory · Maven

GHSA-rx4r-gxpc-h85x Jenkins affected by Open Redirect Vulnerability

HIGH Published 2022-05-14 Modified 2025-03-13 Official page ↗
Aliases
CVE-2016-3726
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weaknesses
CWE-601
Reviewed
2025-03-13

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.652, < 2.3 → fixed in 2.3 • Maven org.jenkins-ci.main:jenkins-core: < 1.651.2 → fixed in 1.651.2

Description

Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.

Related

Alias · CVE (1)

  • CVE-2016-3726 Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References