Keycloak Authentication (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-01-26. Vendor: Jenkins.

CVEs of Keycloak Authentication

• CVE-2023-24457 - CVSS 6.5 (medium), 2023-01-26: A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in…
• CVE-2023-24456 - CVSS 9.8 (critical), 2023-01-26: Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.