En resumen
- CVE-2025-47889 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a org.jenkins-ci.plugins:wso2id-oauth, wso2 oauth (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.65%, mayor que el 51.1% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log in to controllers using this security realm using any username and any password, including usernames that do not exist.
NVD description
In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log in to controllers using this security realm using any username and any password, including usernames that do not exist.
Más vulnerabilidades de org.jenkins-ci.plugins:wso2id-oauth
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free