Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jenkins 插件输入验证错误漏洞
Vulnerability Description
Jenkins 插件是为Jenkins提供相应功能得插件。 Jenkins GitLab 身份验证插件 1.13 及更早版本存在安全漏洞，该漏洞源于在身份验证过程开始时将 HTTP Referer 标头记录为 URL 查询参数的一部分，从而允许有权访问 Jenkins 的攻击者制作一个 URL，该 URL 将在登录后将用户重定向到攻击者指定的 URL。
CVSS Information
N/A
Vulnerability Type
N/A