Description
Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing to Jenkins.
Remediation
References
https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2967
Related Vulnerabilities
CVE-2022-45400 Vulnerability in maven package org.jvnet.hudson.plugins:japex
CVE-2020-2296 Vulnerability in maven package org.jenkins-ci.plugins:shared-objects
CVE-2021-44145 Vulnerability in maven package org.apache.nifi:nifi
CVE-2021-21688 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-33265 Vulnerability in maven package com.hazelcast:hazelcast