Jenkins Project Jenkins Keycloak Authentication Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_keycloak_authentication_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2023-24456P3CRITICALCVSS 9.8≥ unspecified, ≤ 2.3.02023-01-26
CVE-2023-24456 [CRITICAL] CWE-384 CVE-2023-24456: Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on
Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.
nvd
CVE-2023-24457P4MEDIUMCVSS 6.5≥ unspecified, ≤ 2.3.02023-01-26
CVE-2023-24457 [MEDIUM] CWE-352 CVE-2023-24457: A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 an
A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.
nvd
CVE-2026-92141P4MEDIUMCVSS 4.3≤ 2.4.12026-09-16
CVE-2026-92141 [MEDIUM] CWE-601 CVE-2026-92141: Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after lo
Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
nvd