Login Request a demo
JA
Product
Jenkins Azure AD Plugin
by Jenkins project · last CVE Sep 6, 2023
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 3Medium 0Low 0
Severity
All severities3Critical0High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins Azure AD Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24426
8.8
1%
Jan 24
Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login
Affected: through 303.va_91ef20ee49f
CVE-2021-21679
8.8
1%
Aug 31
Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins
Affected: 164.v5b48baa961d2 before unspecified; through 179.vf6841393099e
CVE-2023-41935
7.5
1%
Sep 6
Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and…
Affected: All versions, or not specified
Showing 3