CoreCVE
Back

MEDIUM

An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login

Published Aug 7, 2019

Description

An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner jenkins
Published Aug 7, 2019
Updated Aug 4, 2024
Reserved Mar 29, 2019
Link CVE-2019-10372
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-10372
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-10372
ENISA EUVD
Assigner jenkins
Published Aug 7, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2022-4756
EUVD-2022-4756 GHSA-PG59-2W33-8VMC