Jenkins Github Authentication Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-04-30. Vendor: Jenkins Project.

CVEs of Jenkins Github Authentication Plugin

• CVE-2019-10315 - CVSS 8.8 (high), 2019-04-30: Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF.
• CVE-2019-1003018 - CVSS 4.3 (medium), 2019-02-06: An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that…
• CVE-2019-1003019 - CVSS 5.9 (medium), 2019-02-06: An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized…