Search for packages
| purl | pkg:maven/org.openshift.jenkins/openshift-login@1.1.0.230.v5d7030b |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2a3h-6wad-63gc | URL Redirection to Untrusted Site ('Open Redirect') Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks. |
CVE-2023-37947
GHSA-35gf-xjgf-96c5 |
| VCID-955x-hg4a-5kc3 | Session Fixation Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login. |
CVE-2023-37946
GHSA-rwg5-2pv9-633w |