Jenkins OpenShift Login Plugin <1.1.0.227 Enables Redirect Phishing
CVE-2023-37947 Published on July 12, 2023
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Products Associated with CVE-2023-37947
Want to know whenever a new CVE is published for Jenkins Openshift Login? stack.watch will email you.
Affected Versions
Jenkins Project Jenkins OpenShift Login Plugin:- Before and including 1.1.0.227.v27e08dfb_1a_20 is affected.
- Before and including 1.1.0.227.v27e08dfb_1a_20 is affected.
Exploit Probability
EPSS
0.08%
Percentile
24.02%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.