cbcvebase.

Jenkins Project Jenkins Microsoft Entra Id Plugin vulnerabilities

1 known vulnerability affecting jenkins_project/jenkins_microsoft_entra_id_plugin.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-42525P4MEDIUMCVSS 4.3≤ 666.v6060de32f87d2026-04-29
CVE-2026-42525 [MEDIUM] CWE-601 CVE-2026-42525: Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restr Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
nvd
Jenkins Project Jenkins Microsoft Entra Id Plugin vulnerabilities | cvebase