VULNERABILITY INTELLIGENCE

CVE-2018-1000174

CVSS score6.1 MEDIUM

EPSS probability0.95%

CISA KEVNot currently listed

Published2018-05-08

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.

Weakness classification

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory