CVE-2018-1000174

Description

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.03

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-1000174,CVE-2018-1000173 are fixed in Jenkins - google-login 1.3.1	Windows
Vulnerabilities CVE-2018-1000174,CVE-2018-1000173 are fixed in Jenkins - google-login for Linux 1.3.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234