CVE-2022-25196

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process…

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00724 · 53.5th percentile
Published
2022-02-15T16:11Z
EPSS history
Timeline
  • 15 FEB 16:11Z
    Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process…
    cvelistv5