Jenkins Cas Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-05-16. Vendor: Jenkins Project.

CVEs of Jenkins Cas Plugin

• CVE-2023-32997 - CVSS 8.8 (high), 2023-05-16: Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login.
• CVE-2021-21673 - CVSS 6.1 (medium), 2021-06-30: Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform…