Jenkins Project Jenkins Saml Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_saml_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2026-84668P3HIGHCVSS 8.8≤ 4.618.v441a_27fa_46d22026-09-02
CVE-2026-84668 [HIGH] CWE-284 CVE-2026-84668: Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider
Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user.
nvd
CVE-2025-64131P3HIGHCVSS 7.5≤ 4.583.vc68232f7018a_2025-10-29
CVE-2025-64131 [HIGH] CWE-294 CVE-2025-64131: Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing att
Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.
nvd
CVE-2021-21678P3HIGHCVSS 8.8≥ 1.1.3, < unspecified≥ unspecified, ≤ 2.0.72021-08-31
CVE-2021-21678 [HIGH] CWE-352 CVE-2021-21678: Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF prot
Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
nvd