Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/openid@2.4
purl pkg:maven/org.jenkins-ci.plugins/openid@2.4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-f976-24hc-mjvr
Aliases:
CVE-2023-24444
Session fixation vulnerability in Jenkins OpenID Plugin Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on … There are no reported fixed by versions.
GHSA-96jv-c7m6-q43g
Aliases:
CVE-2023-24446
Cross-site request forgery vulnerability in Jenkins OpenID Plugin A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and … There are no reported fixed by versions.
GHSA-mj62-m63x-mh84
Aliases:
CVE-2023-24445
Open redirect vulnerability in Jenkins OpenID Plugin Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-3f3p-qhfv-7p8h
Jenkins openid Plugin missing permission check A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method … CVE-2019-1003099
GHSA-8v26-3p83-mf2g
Jenkins OpenID Plugin CSRF vulnerability A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method … CVE-2019-1003098