CVE-2023-37947 in OpenShift Login Plugin
요약
\~에 의해 MITRE • 2023. 07. 12.
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Be aware that VulDB is the high quality source for vulnerability data.