CVE-2026-92141

Опубликовано: 16 сент. 2026

Источник: nvd

CVSS3: 4.3

Описание

Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Ссылки

https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3767

Связанные уязвимости

GHSA-4f55-vrqg-62c7

CVSS3: 4.3

github

2 дня назад

Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.