GCVE - cpe:2.3:a:jenkins:openid:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:openid:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Openid (`3eec39b1-f942-5420-8ef8-2512f9ee2816`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50771`	vulnerable	2026-06-08 06:16:16.649203	Details available Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks. Published: 2023-12-13T17:30:18.172Z Updated: 2025-02-13T17:19:35.345Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-2979 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50770`	vulnerable	2026-06-08 06:16:16.648821	Details available Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers with access to the Jenkins controller file system to recover the plain text password of that account, likely gaining administrator access to Jenkins. Published: 2023-12-13T17:30:17.513Z Updated: 2025-02-13T17:19:34.765Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3168 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24446`	vulnerable	2026-06-08 05:56:05.473195	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account. Published: 2023-01-24T00:00:00.000Z Updated: 2025-04-02T13:51:02.340Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24445`	vulnerable	2026-06-08 05:56:05.472834	Details available Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins. Published: 2023-01-24T00:00:00.000Z Updated: 2025-04-02T13:51:47.628Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2997	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24444`	vulnerable	2026-06-08 05:56:05.472395	Details available Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login. Published: 2023-01-24T00:00:00.000Z Updated: 2025-04-02T13:52:19.949Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2996	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003099`	vulnerable	2026-06-08 05:12:21.539271	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003098`	vulnerable	2026-06-08 05:12:21.538827	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.