Description
An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.
Remediation
References
http://www.securityfocus.com/bid/104211
https://jenkins.io/security/advisory/2018-04-16/
Related Vulnerabilities
CVE-2022-1245 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2016-2173 Vulnerability in maven package org.springframework.amqp:spring-amqp
CVE-2017-7666 Vulnerability in maven package org.apache.openmeetings:openmeetings-web
CVE-2017-5878 Vulnerability in maven package org.red5:red5-server
CVE-2020-11021 Vulnerability in npm package @actions/http-client