Jenkins Keycloak Authentication vulnerabilities
2 known vulnerabilities affecting jenkins/keycloak_authentication.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2023-24456P3CRITICALCVSS 9.8≤ 2.3.02023-01-26
CVE-2023-24456 [CRITICAL] CWE-384 CVE-2023-24456: Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on
Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.
nvd
CVE-2023-24457P4MEDIUMCVSS 6.5≤ 2.3.02023-01-26
CVE-2023-24457 [MEDIUM] CWE-352 CVE-2023-24457: A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 an
A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.
nvd