Jenkins Saml Single Sign-On vulnerabilities

1 known vulnerability affecting jenkins/saml_single_sign-on.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-32996MEDIUMCVSS 4.3≤ 2.0.02023-05-16

CVE-2023-32996 [MEDIUM] CWE-276 CVE-2023-32996: A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attac A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.