Gitlab Oauth (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 51 known versions, newest CVE from 2019-08-07. Vendor: Jenkins.

CVEs of Gitlab Oauth

• CVE-2019-10372 - CVSS 6.1 (medium), 2019-08-07: An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL…
• CVE-2019-10371 - CVSS 7.5 (high), 2019-08-07: A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to…