Vendor/product archive

jenkins / keycloak_authentication CVEs

Beta · best-effort

2 CVEs tagged to jenkins / keycloak_authentication — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2023-24457

Published Jan 26, 2023

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's acc…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-24456

Published Jan 26, 2023

Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1