CVE-2022-25196

· MEDIUMModified

← All CVEs

CVSS v3.1

5.4

EPSS

0.72%

Published

Feb 15, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-601

Affected Products (1)

jenkins · gitlab_authenticationvulnerable

References (4)

http://www.openwall.com/lists/oss-security/2022/02/15/2

Mailing ListThird Party Advisory

https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1833

Issue TrackingPatchVendor Advisory

http://www.openwall.com/lists/oss-security/2022/02/15/2

Mailing ListThird Party Advisory

https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1833

Issue TrackingPatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs