Threats tagged 'ghsa-jp6g-g3v3-6gvf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-42525Org.jenkins ci.plugins:azure ad: Jenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect Medium4.32026-04-29GCVE DatabaseCVE-2026-42525 The Jenkins Microsoft Entra ID (previously Azure AD) Plugin versions 666.v6060de32f87d and earlier contain an open redirect vulnerability. This flaw allows an attacker to craft a Jenkins login URL that redirects users to an external site after authentication, facilitating phishing attacks. The issue is fixed in version 667.v4c5827a, which restricts redirects to relative Jenkins URLs only. Report on CVE-2026-42525 Vulnerability CWE-601 #ghsa-jp6g-g3v3-6gvf #maven	GCVE Database	2026-04-29

Page 1 of 1